CVE-2025-66003: External Control of File Name or Path

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5...

CVE-2025-64739: External Control of File Name or Path

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-20614: External Control of File Name or Path

External control of file name or path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privileg...

CVE-2025-8998: External Control of File Name or Path

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account...

CVE-2025-59511: External Control of File Name or Path

External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally...

CVE-2025-59483: External Control of File Name or Path

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59292: External Control of File Name or Path

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

CVE-2025-59185: External Control of File Name or Path

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-55316: External Control of File Name or Path

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-53769: External Control of File Name or Path

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

CVE-2025-29866: External Control of File Name or Path

: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035...

CVE-2025-4674: External Control of File Name or Path

The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...

CVE-2024-1243: External Control of File Name or Path

Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...

CVE-2024-1244: External Control of File Name or Path

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2...

CVE-2025-33053: External Control of File Name or Path

External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network...

CVE-2025-47956: External Control of File Name or Path

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...

CVE-2025-48781: External Control of File Name or Path

An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to obtain partial files by specifying arbitrary file paths...

CVE-2025-26684: External Control of File Name or Path

External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

CVE-2025-26646: External Control of File Name or Path

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

CVE-2025-1056: External Control of File Name or Path

Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version...