138 matches found
CVE-2026-115813
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL. Multi Model Server is end of life and no fixed version is available. Users shoul...
EUVD-2026-109112
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL. Multi Model Server is end of life and no fixed version is available. Users shoul...
CVE-2026-115813
The Amazon Web Services Multi Model Server (version 1.1.11 and earlier ) is vulnerable to a Server-Side Request Forgery (SSRF) in the model download path. This flaw allows remote actors to send requests to internal network destinations by providing a crafted model URL . Because the software is en...
CVE-2026-115813 Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL. Multi Model Server is end of life and no fixed version is available. Users shoul...
PT-2026-122189
Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL. Multi Model Server is end of life and no fixed version is available. Users shoul...
EUVD-2026-97668
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-2...
CVE-2026-109366: Improper Validation of Integrity Check Value
Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks without penalty. Attackers can serve a real block with a coinbase scriptSig rewritten to height 1, which keeps the ZIP-2...
CVE-2026-104422
Zebra (zebrad) versions before 6.3.0 are vulnerable to a Denial of Service (DoS) attack in the block sync download path. The software reads a block's height from an unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip before consensus validation occurs, without penal...
Samsung WLAN AP WEA453e - File Read
Reads arbitrary files via the /download/ handler on Samsung WLAN AP WEA453e devices. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung WLAN AP WEA453e download path file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi...
CVE-2026-76312: Improper Access Control
In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who can read the Hypertext Markup Language HTML source of a page that embeds a Splunk report could use exposed session material to access all relevant data and affect system integrity. The vulnerabilit...
PYSEC-2026-3606 Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Summary Penelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating archive member paths. When using the affected Unix download path, a malicious or compromised remote session could return a crafted tar archive containing path traversal entries, such ...
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
SummaryPenelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating archive member paths. When using the affected Unix download path, a malicious or compromised remote session could return a crafted tar archive containing path traversal entries, such a...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the Link.filename path handling in pip.internal.models.link and the download path joins in pip.internal.network.download and pip.internal.req.reqinstall. An attacker can place files at arbitrary locations on disk...
CVE-2026-65765
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities...
CVE-2026-65765 Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities...
CVE-2026-65765
CVE-2026-65765 describes a path traversal vulnerability in the Joomla extension Phoca Commander (Phoca Commander 1.0.0–6.1.1) for the Phoca.cz package. The issue is triggered by improper limitation of paths for save and download actions, enabling traversal to restricted paths. Affected software: ...
CVE-2026-16870: Stack-based Buffer Overflow
Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execution on a victim host. An attacker could exploit this by...
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.
...