1466 matches found
CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera
🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on CVE-2022-0337 System environment variables leak on Google Chrome, Microsoft Edge and Opera 📝 Description Successful exploitation of this vulnerability can lead to the leak of user's secrets stored inside a...
CVE-2021-21123-PoC-Google-Chrome
📝 Description Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski Total Bug Bounty Reward: $5.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-21123 MEDIUM CVE-2021-21129 MEDIUM CVE-2021-21130 MEDIUM CVE-2021-21131 MEDIUM CVE-2021-2117...
Jenkins-CVE-2024-23897
Jenkins CVE-2024-23897 PoC A proof-of-concept PoC for CVE-2024-23897, an arbitrary file read vulnerability in Jenkins' built-in command line interface CLI. It allows unauthenticated attackers with Overall/Read permission to read arbitrary files on the Jenkins controller file system. Affected...
CVE-2026-76713
A vulnerability exists in the maintenance restore functionality of HPE Networking Analytics and Location Engine (ALE) . An authenticated remote attacker can exploit this flaw to gain unauthorized access to the file system with root privileges , potentially leading to a full system compromise . No...
CVE-2026-76713 Authenticated Remote File System Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full syste...
EUVD-2026-84673
A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full syste...
ROS-20260915-73-0089
The vulnerability of the File System Access component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...
USN-8732-1: Minetest vulnerability
It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...
USN-8732-1 minetest vulnerability
It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...
CVE-2026-85149 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...
PT-2026-85386
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...
The vulnerability of the File System Access component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.
The vulnerability of the File System Access component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...
The vulnerability of the File System Access component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data and compromise data integrity.
The vulnerability of the File System Access component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and influence data integrity through a specially created PDF file...
EUVD-2026-67161
libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...
CVE-2026-81683: Cleartext Storage of Sensitive Information
opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...
CVE-2024-20767-Adobe-ColdFusion
CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion è una piattaforma di sviluppo rapido per creare e distribuire applicazioni web e mobili. CVE-2024-20767 - Le versioni di ColdFusion 2023.6, 2021.12 e precedenti sono affette da una vulnerabilità di Controllo Accesso Inadeguato che potrebbe portare...
EUVD-2026-65621
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...
Directory Traversal
Overview mineadmin/mineadmin is a Quickly build a background management system for web applications Affected versions of this package are vulnerable to Directory Traversal via the identifier parameter in the plugin installation and uninstallation process. An attacker can access or modify files...
