399998 matches found
CVE-2026-66656
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-66653
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
CVE-2026-66450
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...
CVE-2026-65582
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-61980
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
CVE-2026-28189
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...
CVE-2026-28157
Subscriber Path Traversal in Do Lasso = 358 versions...
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
Summary A client that can submit message history to a Pydantic AI UI adapter can reference arbitrary files in the application's model-provider or cloud-storage account. The server forwards the reference to the model provider, which fetches it using the server's own credentials, allowing the clien...
EUVD-2026-50562
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials...
ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
Description src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts both compute their temporary working-file paths as: ts const randNum = Math.floorMath.random 0xFFFFFFFF; const srcFile = $os.tmpdir/etherpadexport$randNum.html; const destFile =...
CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
EUVD-2026-57896
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66657
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66656
CVE-2026-66656 describes an unauthenticated Local File Inclusion in the WordPress Foton Core plugin, versioned = 1.1.2 is advised, but a concrete fix/version is not specified in the provided data.
EUVD-2026-57895
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-66656
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-66656 WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-66657
The CVE-2026-66657 entry describes an Unauthenticated Local File Inclusion in the WordPress Biagiotti Core plugin, versions