Lucene search
+L

8921 matches found

OSV
OSV
added 2026/08/07 5:17 p.m.5 views

UBUNTU-CVE-2026-71557

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference name for example containing...

6.3CVSS5.3AI score0.00413EPSS
SaveExploits1References9
UbuntuCve
UbuntuCve
added 2026/08/07 5:17 p.m.9 views

CVE-2026-71556

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...

7.1CVSS5.3AI score0.00357EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/08/07 4:41 p.m.6 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

7CVSS6.3AI score0.00413EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/08/07 4:41 p.m.5 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

7CVSS6.3AI score0.00413EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/08/07 4:41 p.m.5 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

7CVSS6.3AI score0.00413EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/08/07 4:41 p.m.5 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the processing of reference names in dotgit. An attacker can modify or overwrite files outside the intended reference storage by supplying specially crafted reference names containing path traversal sequences. Th...

7CVSS6.3AI score0.00413EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/07 4:41 p.m.25 views

CVE-2026-71557 go-git: Malicious reference names may modify files outside the reference storage

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before being used to construct on-disk paths under the reference storage directory, so a maliciously crafted reference name for example containing...

6.3CVSS5.3AI score
SaveExploits0References9
Snyk
Snyk
added 2026/08/07 4:37 p.m.5 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in worktreefs.go and worktree.go are vulnerable to symlink traversal in filesystem-backed worktrees. An attacker can modify or overwrite files outside the intended worktree by placing a symlink in the tree and then...

7.1CVSS5.8AI score0.00357EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/07 4:37 p.m.5 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in worktreefs.go and worktree.go are vulnerable to symlink traversal in filesystem-backed worktrees. An attacker can modify or overwrite files outside the intended worktree by placing a symlink in the tree and then...

7.1CVSS5.8AI score0.00357EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/07 4:37 p.m.11 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in worktreefs.go and worktree.go are vulnerable to symlink traversal in filesystem-backed worktrees. An attacker can modify or overwrite files outside the intended worktree by placing a symlink in the tree and then...

7.1CVSS5.8AI score0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/07 10:16 a.m.15 views

CVE-2026-54208

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the server with attacker-controlled content. This is possible because user input is written directly to files without proper...

8.5CVSS0.0038EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/07 9:45 a.m.36 views

CVE-2026-54208 TeamDavid: Arbitrary File Write leading to Stored XSS

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the server with attacker-controlled content. This is possible because user input is written directly to files without proper...

8.5CVSS0.0038EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/07 9:45 a.m.11 views

CVE-2026-54208

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the server with attacker-controlled content. This is possible because user input is written directly to files without proper...

8.5CVSS5.2AI score0.0038EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/07 9:45 a.m.13 views

EUVD-2026-54439

Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to arbitrary file write, allowing an unauthenticated attacker to create or write into existing files on the server with attacker-controlled content. This is possible because user input is written directly to files without proper...

8.5CVSS5.2AI score0.0038EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 9:45 a.m.59 views

CVE-2026-54208

The CVE affects Tobit Laboratories AG TeamDavid’s Webbox. An unauthenticated attacker can exploit an arbitrary file-write flaw (via unsafely written user input) to create/write files (e.g., .htm) containing JavaScript, triggering stored XSS when a user accesses the file. The issue affects TeamDav...

8.5CVSS5.2AI score0.0038EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2026/08/07 8:13 a.m.9 views

remote limited file-write as root via discovery in open-iscsi

...

6.9CVSS5.2AI score0.0033EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/08/07 8:00 a.m.13 views

pip absolute path traversal during download from malicious package indexes

...

6.5CVSS5.2AI score0.00292EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/07 6:08 a.m.8 views

CVE-2026-70428

A flaw was found in Jenkins. Attackers with specific permissions Item/Configure and Item/Build can exploit this vulnerability. By manipulating file parameter names, they can bypass security checks and write files to any location on the Jenkins controller's file system. This path traversal...

8.8CVSS5.9AI score0.00245EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/07 12:31 a.m.14 views

EUVD-2026-54235

Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new Filepath and file.transferTodest with no path validation. The route is marked @SaIgnore and /download/ is excluded from the Sa-Token interceptor, so the only guard is a header equality che...

9.8CVSS5.8AI score0.00596EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/07 12:31 a.m.15 views

EUVD-2026-54219

Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file with partially attacker-controlled body to any path ending in .network, and create any missing parent directories with mode 0777 via network Alias on Ubuntu. Affected versions: BOSH...

4.2CVSS5.5AI score0.00152EPSS
SaveExploits0References2
Rows per page
Query Builder