73 matches found
CVE-2026-9712 Insecure direct object reference
When creating an export through the pretix API, API clients are returned an UUID value for their export job a long, random string like 35742818-c375-4d15-839f-d49aecce94d6. Using this UUID, the API client can then request the actual file for download. The same kind of UUID is used in other places...
Garmin WDU 安全漏洞
Garmin WDU is a wireless data unit developed by Garmin Corporation, designed for data updates and maintenance of aviation electronic devices. Versions 1.1.6 and 2.5.0 of Garmin WDU contain security vulnerabilities. These vulnerabilities stem from the ability to allow symbolic link attacks, which...
EUVD-2026-20974
AGiXT is a dynamic AI Agent Automation Platform. Prior to 1.9.2, the safejoin function in the essentialabilities extension fails to validate that resolved file paths remain within the designated agent workspace. An authenticated attacker can use directory traversal sequences to read, write, or...
Qnap QTS and QuTS hero Improper Link Resolution Before File Access (CVE-2024-53691)
A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: expat (UTSA-2025-991275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991275 advisory. expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XMLSetEntityDeclHandler function, which allows remote...
EUVD-2018-0681
Malware in sbrugna...
EUVD-2018-3668
Malware in sbrugna...
EUVD-2011-2511
Malware in sbrugna...
EUVD-2022-51594
Malicious code in bioql PyPI...
EUVD-2021-27537
Malicious code in bioql PyPI...
EUVD-2022-3792
Malicious code in bioql PyPI...
EUVD-2024-49221
Malicious code in bioql PyPI...
EUVD-2023-1087
Malicious code in bioql PyPI...
EUVD-2024-16935
Malicious code in bioql PyPI...
EUVD-2024-44157
Malicious code in bioql PyPI...
EUVD-2023-32460
Malicious code in bioql PyPI...
EUVD-2024-54663
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-6109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - readAsText can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to...
Linux Distros Unpatched Vulnerability : CVE-2019-11730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or...
The vulnerability of iPadOS and macOS operating systems, related to incorrect handling of links before accessing files, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of iPadOS and macOS operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...