12 matches found
CNVD-2021-26058
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:22+00:00| seen| https://t.me/CVEhub/15266 2026-07-30 00:00:43+00:00| seen| https://t.me/CVEhub/15266 2026-07-31 00:00:33+00:00| published-proof-of-concept| https://t.me/CVEhub/15266...
CVE-2026-26058 Zulip: Path Traversal in Import
Zulip is an open-source team collaboration tool. From version 1.4.0 to before version 11.6, ./manage.py import reads arbitrary files from the server filesystem via path traversal in uploads/records.json. A crafted export tarball causes the server to copy any file the zulip user can read into the...
CVE-2025-26058
creationtimestamp| type| source ---|---|--- 2025-02-18 18:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihulnndlf2t 2025-02-18 20:59:46+00:00| seen| https://t.me/cvedetector/18348 2025-02-18 21:56:20+00:00| seen|...
CVE-2025-26058
Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL...
CVE-2025-26058
Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL...
CVE-2025-26058
Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL...
CVE-2023-26058
creationtimestamp| type| source ---|---|--- 2023-04-25 16:25:13+00:00| seen| https://t.me/cibsecurity/62798...
CVE-2023-26058
An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as...
CVE-2023-26058
CVE-2023-26058 – Nokia NetAct XXE : Multiple sources confirm an XML External Entity vulnerability in Nokia NetAct prior to 22 FP2211, exploitable via an XML document to a Performance Manager page. The root cause is missing input validation and improper XML parser configuration. Impact is describe...