Lucene search
K

12 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/03 10:32 p.m.1 views

CVE-2026-1812

A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. The manipulation of the argument File leads to path traversal. It is possible to...

6.5CVSS6.2AI score0.0011EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/03 10:32 p.m.24 views

CVE-2026-1812 bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal

A vulnerability has been found in bolo-blog bolo-solo up to 2.6.4. This impacts the function importFromCnblogs of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. The manipulation of the argument File leads to path traversal. It is possible to...

6.5CVSS0.0011EPSS
Exploits1References5
CVE
CVE
added 2026/02/03 10:32 p.m.7 views

CVE-2026-1812

The CVE-2026-1812 issue affects bolo-blog/bolo-solo up to version 2.6.4. The flaw is a path traversal in the importFromCnblogs() function of BackupService.java in the Filename Handler component, caused by manipulation of the File argument. This allows remote exploitation and has had its exploit d...

9.8CVSS5.1AI score0.0011EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/03 9:32 p.m.2 views

CVE-2026-1811 bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal

A flaw has been found in bolo-blog bolo-solo up to 2.6.4. This affects the function importFromMarkdown of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component Filename Handler. Executing a manipulation of the argument File can lead to path traversal. The attack may ...

6.5CVSS5AI score0.0004EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.2 views

bolo-solo 路径遍历漏洞

Bolo-Solo is a blog system developed under the open source Bolo-Blog project. Versions of Bolo-Solo 2.6.4 and earlier contained a path traversal vulnerability. This vulnerability stemmed from the improper handling of parameters File in the importFromCnblogs function in the file...

9.8CVSS6.6AI score0.0011EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.5 views

bolo-solo 路径遍历漏洞

Bolo-Solo is a blog system developed under the open source Bolo-Blog project. Versions of Bolo-Blog and Bolo-Solo 2.6.4 and earlier had a path traversal vulnerability. This vulnerability stemmed from the improper handling of the File parameter in the importFromMarkdown function in the file...

8.8CVSS6.6AI score0.0004EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/31 9:14 p.m.4 views

CVE-2026-1691

A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component SnakeYAML. Such manipulation leads to deserialization. The attack may be launched remotely. The exploit has...

8.8CVSS6.1AI score0.00068EPSS
Exploits1References1
NVD
NVD
added 2026/01/30 5:16 p.m.2 views

CVE-2026-1691

A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component SnakeYAML. Such manipulation leads to deserialization. The attack may be launched remotely. The exploit has...

8.8CVSS0.00068EPSS
Exploits1References5
CVE
CVE
added 2026/01/30 5:2 p.m.8 views

CVE-2026-1691

CVE-2026-1691 affects bolo-solo up to 2.6.4, specifically the function importMarkdownsSync in BackupService.java (SnakeYAML). The vulnerability enables deserialization via this pathway, with remote execution potential as stated. The exploit has been disclosed publicly. Connected sources provide v...

8.8CVSS6.1AI score0.00068EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/30 5:2 p.m.3 views

CVE-2026-1691

A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component SnakeYAML. Such manipulation leads to deserialization. The attack may be launched remotely. The exploit has...

6.5CVSS5.4AI score0.00068EPSS
Exploits1References5
myhack58
myhack58
added 2015/04/22 12:0 a.m.39 views

ADB backupAgent mention the right vulnerability analysis CVE-2 0 1 4-7 9 5 3-the vulnerability warning-the black bar safety net

0x00 summary CVE-2 0 1 4-7 9 5 3 is present in the android backup agent in a mention the right vulnerability. ActivityManagerService in bindBackupAgent method fails to check the incoming uid parameters, combined with the addition of a race condition the use of techniques, the attacker can be in a...

0.2AI score
Exploits0
securityvulns
securityvulns
added 2007/02/01 12:0 a.m.24 views

Remote Unauthenticated Resource Exhaustion CA Mobile BackupService

======= Summary ======= Today: 31 January 2007 Reference: NGS00401 Discover: Mark Litchfield; John Heasman Name: Remote Unauthenticated Resource Exhaustion Mobile BackupService Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk: Medium Statu...

7.1AI score
Exploits0
Rows per page
Query Builder