Lucene search
K

6797 matches found

Vulnrichment
Vulnrichment
added 2025/07/22 12:0 a.m.3 views

CVE-2025-51475

Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...

7.5AI score0.00141EPSS
Exploits1References3
CVE
CVE
added 2025/07/22 12:0 a.m.19 views

CVE-2025-51475

The CVE-2025-51475 entry affects TransformerOptimus SuperAGI v0.0.14, specifically the file upload path handling in superagi.controllers.resources.upload. A directory-traversal flaw in os.path.join() and missing validation in get_root_input_dir() can allow an attacker to overwrite arbitrary files...

5CVSS7AI score0.00141EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2025/07/22 12:0 a.m.7 views

CVE-2025-51475

Arbitrary File Overwrite AFO in superagi.controllers.resources.upload in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to overwrite arbitrary files via unsanitised filenames submitted to the file upload endpoint, due to improper handling of directory traversal in os.path.join and lac...

0.00141EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/07/22 12:0 a.m.2 views

PT-2025-30455 · Unknown · Transformeroptimus/Superagi

Name of the Vulnerable Software and Affected Versions: TransformerOptimus SuperAGI version 0.0.14 Description: An arbitrary file overwrite issue exists in the superagi.controllers.resources.upload component. This allows remote attackers to overwrite arbitrary files by submitting unsanitized...

5CVSS6.7AI score0.00141EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/07/19 1:6 p.m.5 views

CVE-2025-5346

Bluebird devices contain a pre-loaded barcode scanner application. This application exposes an unsecured broadcast receiver "kr.co.bluebird.android.bbsettings.BootReceiver". A local attacker can call the receiver to overwrite file containing ".json" keyword with default barcode config file. It is...

5.1CVSS7AI score0.00089EPSS
Exploits0References1
NVD
NVD
added 2025/07/17 1:15 p.m.2 views

CVE-2025-5346

Bluebird devices contain a pre-loaded barcode scanner application. This application exposes an unsecured broadcast receiver "kr.co.bluebird.android.bbsettings.BootReceiver". A local attacker can call the receiver to overwrite file containing ".json" keyword with default barcode config file. It is...

5.1CVSS0.00089EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/17 12:0 a.m.2 views

Bluebird 安全漏洞

Bluebird is an application from Bluebird South Korea that is used to lock a device into a dedicated mode, restricting a user's access to only specified features or applications. A security vulnerability exists in Bluebird versions prior to 1.3.3 that stems from the barcode scanner application...

8.5CVSS6.2AI score0.00089EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/07/16 11:21 p.m.2 views

SUSE CVE-2025-53905

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS6.4AI score0.00074EPSS
Exploits1References14
Tenable Nessus
Tenable Nessus
added 2025/07/16 12:0 a.m.3 views

AlmaLinux 8 : socat (ALSA-2025:11042)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:11042 advisory. socat: arbitrary file overwrite via predictable /tmp directory CVE-2024-54661 Tenable has extracted the preceding description block directly from the AlmaLinux...

9.8CVSS7.1AI score0.00164EPSS
Exploits0References3
NVD
NVD
added 2025/07/15 9:15 p.m.5 views

CVE-2025-53906

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS0.00072EPSS
Exploits1References4
NVD
NVD
added 2025/07/15 9:15 p.m.3 views

CVE-2025-53905

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS0.00074EPSS
Exploits1References3
OSV
OSV
added 2025/07/15 9:15 p.m.1 views

DEBIAN-CVE-2025-53905

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS6.4AI score0.00074EPSS
Exploits1References1
OSV
OSV
added 2025/07/15 9:15 p.m.3 views

AZL-65333 CVE-2025-53906 affecting package vim for versions less than 9.1.1552-1

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS7AI score0.00072EPSS
Exploits1References1
OSV
OSV
added 2025/07/15 9:15 p.m.0 views

UBUNTU-CVE-2025-53905

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS6.8AI score0.00074EPSS
Exploits1References5
OSV
OSV
added 2025/07/15 8:52 p.m.3 views

CVE-2025-53906 Vim has path traversal issue with zip.vim and special crafted zip archives

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS7.8AI score0.00072EPSS
Exploits1References5
OSV
OSV
added 2025/07/15 8:48 p.m.2 views

CVE-2025-53905 Vim has path traversial issue with tar.vim and special crafted tar files

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS7.6AI score0.00074EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2025/07/15 8:48 p.m.4 views

CVE-2025-53905

Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS6.4AI score0.00074EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2025/07/15 12:52 a.m.5 views

socat: arbitrary file overwrite via predictable /tmp directory

A flaw was found in the readline.sh script of Socat through version 1.8.0.1. This vulnerability can allow attackers to exploit improper use of a predictable temporary file...

9.8CVSS6.8AI score0.00164EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2025/07/15 12:52 a.m.14 views

Moderate: Red Hat Security Advisory: socat security update

An update for socat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

9.8CVSS6.8AI score0.00164EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/15 12:0 a.m.1 views

Vim 路径遍历漏洞

Vim is a cross-platform text editor from the Vim open source. A path traversal vulnerability exists in versions prior to Vim 9.1.1551, which stems from a path traversal issue in the zip.vim plugin that could lead to arbitrary file overwrites...

4.1CVSS6.8AI score0.00072EPSS
Exploits1References5
Rows per page
Query Builder