1764 matches found
GNUnet P2P Framework 0.26.1
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
The vulnerability of the OneDrive for Android file sharing service lies in the incorrect path limitation for restricted access directories, which allows attackers to escalate their privileges.
The vulnerability of the OneDrive for Android file sharing service is related to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
CVE-2025-63419
Cross Site Scripting XSS vulnerability in CrushFTP 11.3.648. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection...
CrushFTP 安全漏洞
CrushFTP is a file transfer server from CrushFTP, Inc. A security vulnerability exists in CrushFTP version 11.3.648, which stems from the web server file sharing feature not cleaning up filenames, and could lead to cross-site scripting attacks...
CVE-2025-63419
CrushFTP version 11.3.6_48 and earlier (prior to 11.3.7_60 ) is vulnerable to HTML Injection (CWE-79) due to a lack of input sanitization in the Web-Based Server's file sharing feature. The application reflects the filename into an emailbody field without proper cleaning, allowing an attacker to ...
PT-2025-46678
Name of the Vulnerable Software and Affected Versions CrushFTP version 11.3.6 48 Description A Cross Site Scripting XSS issue exists in CrushFTP. The web-based server’s file sharing feature reflects the filename to an email body field without proper sanitization, leading to potential HTML...
CVE-2025-63419
Cross Site Scripting XSS vulnerability in CrushFTP 11.3.648. The Web-Based Server has a feature where users can share files, the feature reflects the filename to an emailbody field with no sanitations leading to HTML Injection...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989034)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989034 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning:...
CVE-2025-34501
Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services SSH, HTTP, Telnet, SMB, X11 are enabled by default. If an attacker can reach these interfaces - most often through local or near-local access such as...
PT-2025-44802
Name of the Vulnerable Software and Affected Versions Deck Mate 2 affected versions not specified Description Deck Mate 2 is shipped with pre-set, unchanging credentials for both the root shell and the web user interface. Multiple management services, including SSH, HTTP, Telnet, SMB, and X11, ar...
The vulnerability of the Gladinet CentreStack and Triofox software platforms for secure file sharing, related to the use of files and directories accessible from external parties, allows attackers to expose protected information.
The vulnerability of the Gladinet CentreStack and Triofox software platforms for secure file sharing is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the MFlash file-sharing platform, related to insufficient protection of operational data, allows a hacker to disclose the protected information.
The vulnerability of the MFlash file-sharing platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
GNUnet P2P Framework 0.25.2
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
Microsoft Windows SMB Server Access Control Error Vulnerability
Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. A security vulnerability exists in Microsoft Windows SMB Server that can be exploited by an...
CVE-2025-58726
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network...
EUVD-2025-34368
Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network...
Windows SMB Client Tampering Vulnerability
Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network...
PT-2025-42062
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue exists in the Windows SMB Server component related to improper access control. Exploitation of this issue can allow an attacker to elevate privileges over a network. This ca...
RHEL 8 : kernel (RHSA-2025:17570)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17570 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netsched: ets: Fix double lis...