CVE-2026-113606

Stirling-PDF versions 3.0.0 through 3.2.0 are vulnerable to an authorization bypass (CWE-639) within the processing folders functionality. Authenticated users can access files belonging to other users by pointing a processing folder at the server storage directory via a POST /api/v1/processing-fo...

EUVD-2026-105084

Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...

EUVD-1999-1480

Malware in sbrugna...

Everbrite BeikeShop path traversal vulnerability

Everbrite BeikeShop is an e-commerce system from China Everbright Everbrite. A path traversal vulnerability exists in Everbrite BeikeShop 1.5.5 and earlier versions, which originates in the destroyFiles function of the file /admin/filemanager/files, where manipulation of the parameter files can...

CVE-2021-32814

Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1...

Shamoon Malware Steals Data, Overwrites MBR

A new piece of malware known as Shamoon that has the ability to destroy files on infected machines and overwrite the master boot record has researchers scratching their heads, wondering what the tool’s purpose might be and why the attackers behind it would destroy infected PCs. There are some...