104 matches found
Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints
Cross-User File Access via Unchecked fileid in Folder Knowledge and Knowledge-Base Attach Endpoints SummaryMultiple endpoints accept a user-supplied fileid and attach the referenced file to a resource the caller controls folder knowledge, knowledge-base contents without verifying that the caller...
PT-2026-59393
Cross-User File Access via Unchecked file id in Folder Knowledge and Knowledge-Base Attach Endpoints Summary Multiple endpoints accept a user-supplied file id and attach the referenced file to a resource the caller controls folder knowledge, knowledge-base contents without verifying that the call...
External Control of File Name or Path
Overview @pnpm/releasing.commands is a Commands for deploy, pack, and publish Affected versions of this package are vulnerable to External Control of File Name or Path via the stage download process. An attacker can overwrite arbitrary files outside the intended directory by crafting a manifest...
Debian dsa-6354 : libconfig-inifiles-perl - security update
The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6354 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6354-1 [email protected] https://www.debian.org/security/...
K000160938: OpenSSH vulnerabilities CVE-2019-16905 and CVE-2020-12062
Security Advisory Description CVE-2019-16905 OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution...
UBUNTU-CVE-2026-31802
node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar npm can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x...
PT-2026-20979
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.11.4-1.1 Description A denial of service condition can occur due to a malformed SFTP message. Recommendations Update to version 0.11.4-1.1 or later...
📄 DNN Platform Pre‑10.1.1 Arbitrary File Upload
DNN Platform version Pre‑10.1.1 suffers from an unauthenticated arbitrary file upload vulnerability. This software was formerly known as DotNetNuke. ============================================================================================================================================= | Titl...
EUVD-2011-4593
Malware in sbrugna...
EUVD-2014-1714
Malware in sbrugna...
EUVD-2019-10286
Malware in sbrugna...
EUVD-2021-0501
Malware in sbrugna...
EUVD-2004-0283
Malware in sbrugna...
EUVD-2020-27066
Malware in sbrugna...
EUVD-2003-0021
Malware in sbrugna...
EUVD-2003-0597
Malware in sbrugna...
EUVD-2018-1865
Malware in sbrugna...
EUVD-2006-1461
Malware in sbrugna...