CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - प्रमाणित सब्सक्राइबर+ मनमानी फ़ाइल निर्माण विवरण: WordPress के लिए GPX Viewer प्लगइन gpxvfileupload फ़ंक्शन में क्षमता जांच और फ़ाइल प्रकार सत्यापन की कमी के कारण, संस्करण 2.2.8 तक और इसमें शामिल सभी संस्करणों में मनमानी फ़ाइल निर्माण के प्रति संवेदनशील है। इसस...

cve-2024-3400

cve-2024-3400 برنامج بايثون للاستغلال والفحص لـ CVE-2024-3400 حقن الأوامر في Palo Alto وإنشاء ملفات تعسفية usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploit module of script check...

CVE-2014-5284

CVE-2014-5284 تنفيذ Bash لـ CVE-2014-5284 عنوان الاستغلال: ossec 2.8 ثغرة إنشاء ملف مؤقت غير آمن - تصعيد الامتيازات بايثون جيد لكنه لا يعمل دائمًا مؤلف الاستغلال: mbadanoiu مؤلف استغلال بايثون: skynet-13 الصفحة الرئيسية للبائع: www.ossec.net/ رابط البرنامج:...

Laravel-CVE-2018-15133

Laravel-CVE-2018-15133 यह पायथन स्क्रिप्ट आपको साइटों की सूची बनाने और उनका तुरंत शोषण करने की अनुमति देगा। आवश्यकताएँ: python curl उपयोग: $ python cve.py स्क्रिप्ट निष्पादित करें $ "आप किस साइट पर हमला करना चाहते हैं =" http:victime.com/ साइट को सूची में जोड़ें $ chmod +x nikmok.txt फ़ाइल को 777...

CVE-2026-65891

CVE-2026-65891 — PoC لإعادة تسمية Joomla JCE ماسح ضوئي لإثبات المفهوم لثغرة CVE-2026-65891 في إضافة محرر محتوى Joomla JCE. يسمح التحقق غير السليم من المدخلات في دالة rename إعادة التسمية في مدير ملفات JCE لمستخدم مصادق يمتلك صلاحيات إدارة الملفات بما يلي: إنشاء ملفات مخفية أسماء تبدأ بنقطة، مثل...

Linux Distros Unpatched Vulnerability : CVE-2026-104721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path- traversal vulnerability. More specifically, an MDC-based...

CVE-2026-97662 Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

CVE-2026-97662 Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

Security Bulletin: Maximo AI Service uses client-java-21.0.0.jar which is vulnerable to CVE-2026-15687.

Summary Maximo AI Service uses client-java-21.0.0.jar which is vulnerable to CVE-2026-15687. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-15687 DESCRIPTION: A security issue was discovered in the Kubernetes Java client librar...

EUVD-2026-90495

Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...

CVE-2026-82824 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted

Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...

Rocky Linux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1786548808)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786548808 advisory. - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 ...

CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc (CENTOS7:CLSA-2025:1754941109)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1754941109 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional...

CentOS Linux 6 [TuxCare] Security Update: libsmbclient / libsmbclient-devel / samba / samba-client / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1779902912)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1779902912 advisory. - A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply ...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2022_0350)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20220350 advisory. nodejs-json-schema: Prototype pollution vulnerability CVE-2021-3918 nodejs-ini: Prototype pollution via malicious INI file CVE-2020-7788 nodejs-glob-parent...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2021_3623)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213623 advisory. nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22930 nodejs: Use-after-free on close http2 on stream canceling CVE-2021-22940 c-ares:...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1754342893)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1754342893 advisory. - Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the staging/src/k8s.io/kubectl/pkg/cmd/cp/filespec.go path handling logic. An attacker who controls the tar output from a container can write files to arbitrary locations on a Windows user’s local machine by causi...

DEBIAN-CVE-2026-100689

GitPython before 3.1.62 does not validate the path field read from an untrusted .gitmodules file when updating submodules. While a prior fix GHSA-hmq2-w58f-27jc added Submodule.validatedname to constrain the name field, and GitPython's own containment guard Submodule.torelativepath is applied in...

CVE-2026-100689

A flaw was found in GitPython. When updating submodules, GitPython fails to properly validate the submodule path specified in a repository's configuration file. A remote attacker could exploit this vulnerability by supplying a crafted repository containing directory traversal sequences in the...