492214 matches found
Path traversal vulnerability in file browser
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINSHOME/userContent/. This allows attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in...
CVE-2026-58257
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...
CVE-2026-58257
The GRR resource management and reservation application is vulnerable to Arbitrary File Read and Deletion prior to version 4.5.0 . The root cause is a failure to validate or enforce file paths within the database restoration feature . An attacker with administrator privileges can manipulate input...
EUVD-2026-111410
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...
CVE-2026-58257 GRR vulnerable to Arbitrary File Read and Deletion
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...
CVE-2026-58257 GRR vulnerable to Arbitrary File Read and Deletion
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...
CVE-2026-58257 GRR vulnerable to Arbitrary File Read and Deletion
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...
CVE-2026-58257
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...
HiddenWave
HiddenWave Embedding secret messages in wave audio file What is HiddenWave Hiddenwave is a python based program for simple audio steganography. You can hide your secret text messages in wave audio file. you can play this audio in any media player and secretly share your private message with any...
MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in...
GHSA-M65P-9J7Q-6W33 MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in...
ats-magick-unsigned
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-magick-unsigned ats-magick-unsigned Class: File write Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation experimental magick runs ImageMagick ConvertImageCommand from ?magick=...
GHSA-MGQF-5MF5-PRFJ FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
Summary File read paths resolve symbolic links with filepath.EvalSymlinks and then operate on the resolved target without re-checking that the target still lies inside the user's source/scope. A symlink located inside a user's accessible directory that points outside the scope for example to...
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
Summary File read paths resolve symbolic links with filepath.EvalSymlinks and then operate on the resolved target without re-checking that the target still lies inside the user's source/scope. A symlink located inside a user's accessible directory that points outside the scope for example to...
openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)
A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...
CVE-2026-116690
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...
CVE-2026-116686
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSchema documents with jsonschema's default resolver, causing...
CVE-2026-112350
Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers...
Updated util-linux package fixes security vulnerabilities
Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...
MGASA-2026-0560 Updated util-linux package fixes security vulnerabilities
Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...