Lucene search
K

8253 matches found

Fedora
Fedora
added 2026/03/16 12:28 a.m.5 views

[SECURITY] Fedora 44 Update: pgadmin4-9.13-1.fc44

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

7.5CVSS5.8AI score0.00034EPSS
Exploits1
GithubExploit
GithubExploit
added 2026/03/15 7:11 p.m.95 views

Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server

CVE 2025-5548 Este es el repositorio principal donde document...

9.8CVSS5.8AI score0.01839EPSS
Exploits12
Positive Technologies
Positive Technologies
added 2026/03/15 12:0 a.m.1 views

PT-2026-25564

These vulnerabilities matter because they target the trust boundary of development tools. A crafted object file can crash your debugger CVE-2026-2341 or potentially execute code CVE-2025-11495. Read more: 👉 https://t.co/eePbxfrCYi Security Fedora https://t.co/6gh3G5nd2g...

5.5CVSS5.9AI score0.00028EPSS
Exploits1References1
Fedora
Fedora
added 2026/03/14 12:17 a.m.3 views

[SECURITY] Fedora 44 Update: gst-devtools-1.28.1-1.fc44

Development and debugging tools for GStreamer...

5.8AI score
Exploits0
Rockylinux
Rockylinux
added 2026/03/13 12:1 p.m.7 views

.NET 9.0 security update

An update is available for dotnet9.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

7.5CVSS5.8AI score0.03634EPSS
Exploits0
Oracle linux
Oracle linux
added 2026/03/13 12:0 a.m.8 views

.NET 9.0 security update

9.0.115-1.0.1 - Add support for Oracle Linux 9.0.115-1 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152941...

7.5CVSS5.8AI score0.03634EPSS
Exploits0
OSV
OSV
added 2026/03/13 12:0 a.m.1 views

OPENSUSE-SU-2026:10326-1 giflib-devel-32bit-5.2.2-3.1 on GA media

These are all security issues fixed in the giflib-devel-32bit-5.2.2-3.1 package on the GA media of openSUSE Tumbleweed...

5.1CVSS5.8AI score0.00019EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2026/03/12 8:32 p.m.4 views

TinaCMS CLI has Arbitrary File Read via Disabled Vite Filesystem Restriction

Summary The TinaCMS CLI dev server configures Vite with server.fs.strict: false, which disables Vite's built-in filesystem access restriction. This allows any unauthenticated attacker who can reach the dev server to read arbitrary files on the host system Details When running tinacms dev, the CLI...

6.2CVSS5.9AI score0.06479EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2026/03/12 8:32 p.m.1 views

GHSA-2F24-MG4X-534Q TinaCMS Vulnerable to Path Traversal Leading to Arbitrary File Read, Write and Delete

Summary The TinaCMS CLI development server exposes media endpoints that are vulnerable to path traversal, allowing attackers to read and write arbitrary files on the filesystem outside the intended media directory. Details When running tinacms dev, the CLI starts a local HTTP server default port...

8.4CVSS6.3AI score0.00034EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2026/03/12 8:32 p.m.3 views

TinaCMS Vulnerable to Path Traversal Leading to Arbitrary File Read, Write and Delete

Summary The TinaCMS CLI development server exposes media endpoints that are vulnerable to path traversal, allowing attackers to read and write arbitrary files on the filesystem outside the intended media directory. Details When running tinacms dev, the CLI starts a local HTTP server default port...

8.4CVSS6.3AI score0.00034EPSS
Exploits1References3Affected Software1
Snyk
Snyk
added 2026/03/12 6:44 p.m.1 views

Files or Directories Accessible to External Parties

Overview @tinacms/cli is a package used to set up your project with Tina Cloud configuration, and run a local version of the Tina Cloud content-api. Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the dev server configuration when...

6.9CVSS5.8AI score0.06479EPSS
Exploits1References2
OSV
OSV
added 2026/03/12 6:32 p.m.2 views

GHSA-5HXF-C7J4-279C Tina: Path Traversal in Media Upload Handle

Affected Package | Field | Value | |-------|-------| | Package | @tinacms/cli | | Version | 2.0.5 latest at time of discovery | | Vulnerable File | packages/@tinacms/cli/src/next/commands/dev-command/server/media.ts | | Vulnerable Lines | 42-43 | --- Summary A path traversal vulnerability CWE-22...

7.4CVSS6AI score0.0012EPSS
Exploits1References3
Snyk
Snyk
added 2026/03/12 6:32 p.m.2 views

Directory Traversal

Overview @tinacms/cli is a package used to set up your project with Tina Cloud configuration, and run a local version of the Tina Cloud content-api. Affected versions of this package are vulnerable to Directory Traversal in the development server's media upload handler. An attacker can write or...

8.3CVSS6.3AI score0.0012EPSS
Exploits1References2
NVD
NVD
added 2026/03/12 5:16 p.m.0 views

CVE-2026-28791

Tina is a headless content management system. Prior to 2.1.7, a path traversal vulnerability exists in the TinaCMS development server's media upload handler. The code at media.ts joins user-controlled path segments using path.join without validating that the resulting path stays within the intend...

7.4CVSS0.0012EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/03/12 4:55 p.m.1 views

CVE-2026-28791 Path Traversal in Media Upload Handle in Tina

Tina is a headless content management system. Prior to 2.1.7, a path traversal vulnerability exists in the TinaCMS development server's media upload handler. The code at media.ts joins user-controlled path segments using path.join without validating that the resulting path stays within the intend...

7.4CVSS6AI score0.0012EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/12 4:55 p.m.1 views

CVE-2026-28791

Tina is a headless content management system. Prior to 2.1.7, a path traversal vulnerability exists in the TinaCMS development server's media upload handler. The code at media.ts joins user-controlled path segments using path.join without validating that the resulting path stays within the intend...

7.4CVSS5.9AI score0.0012EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2026/03/12 4:55 p.m.0 views

CVE-2026-28791 Path Traversal in Media Upload Handle in Tina

Tina is a headless content management system. Prior to 2.1.7, a path traversal vulnerability exists in the TinaCMS development server's media upload handler. The code at media.ts joins user-controlled path segments using path.join without validating that the resulting path stays within the intend...

7.4CVSS6AI score0.0012EPSS
Exploits1References3
CVE
CVE
added 2026/03/12 4:55 p.m.5 views

CVE-2026-28791

CVE-2026-28791 : TinaCMS’s development server media upload handler is vulnerable to path traversal prior to 2.1.7. The code uses path.join() on user-supplied path segments without restricting the resulting path to the media directory, enabling writing files to arbitrary filesystem locations. The ...

7.4CVSS5.9AI score0.0012EPSS
Exploits1References1Affected Software1
GithubExploit
GithubExploit
added 2026/03/12 2:55 p.m.98 views

binary-exploitation

binary-exploitation A collection of binary exploitation...

6AI score
Exploits0
Oracle linux
Oracle linux
added 2026/03/12 12:0 a.m.10 views

.NET 10.0 security update

10.0.104-1.0.1 - Add support for Oracle Linux 10.0.104-1 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152949...

7.5CVSS5.8AI score0.03634EPSS
Exploits0
Rows per page
Query Builder