466 matches found
GHSA-HFV2-PF68-M33X Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
Impact Due to unsafe handling and deletion of temporary files during the dictionary upload process, an attacker with access to the backoffice can trigger predictable requests to temporary file paths. The application’s error responses HTTP 500 when a file exists, 404 when it does not allow the...
CVE-2025-66625: Exposure of Sensitive Information to an Unauthorized Actor
Umbraco is an ASP.NET CMS. Due to unsafe handling and deletion of temporary files in versions 10.0.0 through 13.12.0, during the dictionary upload process an attacker with access to the backoffice can trigger predictable requests to temporary file paths. The application’s error responses HTTP 500...
Umbraco CMS security vulnerabilities
Umbraco CMS is a content management system from Umbraco, Denmark. A security vulnerability exists in Umbraco CMS versions 10.0.0 through 13.12.0, which stems from improper handling of temporary files and could lead to a file enumeration attack...
FTP Gather File Listing
Enumerates files and directories on FTP server, optionally downloading interesting files !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ftp.ftpclient import FTPClientMixin import os class ModulePost, FTPClientMixin: """FTP File Enumeration Module""" info =...
JLSEC-2025-325 A flaw was found in rsync
A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...
PT-2025-55482
A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...
TencentOS Server 4: podman (TSSA-2025:0281)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0281 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-47220
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLESIGNATURECUSTOMIMAGEPATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an...
CVE-2025-47220: Improper Access Control
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLESIGNATURECUSTOMIMAGEPATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an...
EUVD-2020-30144
Malware in sbrugna...
EUVD-2014-8559
Malware in sbrugna...
EUVD-2005-0589
Malware in sbrugna...
EUVD-2009-0151
Malware in sbrugna...
EUVD-2018-8962
Malware in sbrugna...
EUVD-2019-4214
Malware in sbrugna...
EUVD-2013-3360
Malware in sbrugna...
EUVD-2020-25063
Malware in sbrugna...
EUVD-2017-5392
Malware in sbrugna...