CVE-2026-35585-poc

CVE-2026-35585: إثبات المفهوم لحقن أوامر نظام التشغيل في File Browser النسخة الإنجليزية ملخص هذا المستودع هو إثبات المفهوم PoC للثغرة الأمنية الخطيرة CVE-2026-35585 لحقن أوامر نظام التشغيل المكتشفة في File Browser من الإصدار 2.0.0 إلى 2.33.1. توجد هذه الثغرة في ميزة 'Custom Command Hooks'. نظرًا...

USN-8723-1: SPICE vdagent vulnerabilities

It was discovered that SPICE vdagent had an integer overflow in the buffer size calculation used when writing to the daemon socket. A malicious or compromised SPICE host could possibly use this issue to cause SPICE vdagent to crash, resulting in a denial of service. CVE-2026-57965 It was discover...

POC-CVE-2026-19679

CVE-2026-19679 — تعقيم غير كافٍ لأسماء الملفات المرفوعة التحقق من المدخلات الحالة: مؤكَّدة على بيئة اختبار 6.7.2-14.el9 2026-08-20. أعاد POST /rest/auditFile مع tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" استجابة HTTP 200 وأدى إلى تسجيل AuditFile 1000002 — اسم الملف الحاوي على محار...

CVE-2023-38831-POC

विवरण नाम : CVE-2023-38831 CVSS स्कोर : 7.8 प्रभावित संस्करण : Winrar 6.23 CVE-2023-38831 एक शून्य-दिवसीय भेद्यता है जो WinRAR के 6.23 से पहले के सभी संस्करणों को प्रभावित करती है। यह समस्या ZIP प्रारूप के प्रसंस्करण में है, जो हमलावरों को प्रभावित आर्काइव का उपयोग करके मैलवेयर वितरित करने की...

CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC Nella versione 2.0.19 di Flawfinder, non avviene alcuna sanificazione del nome del file durante l'analisi di nomi di file potenzialmente dannosi. I terminali noti come affetti sono basati su libvte, e l'esempio seguente mostra un mate-terminal. Questo exploit è stato...

CVE-2026-81730

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global saveAttachment in htdocs/emailcollector/lib/emailcollector.lib.php builds $filepath = $path . $filename . '.' . $ext and hands it ...

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

Linux Distros Unpatched Vulnerability : CVE-2026-65612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted...

CVE-2026-44829

Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier are vulnerable to a path traversal in zip entry names. The root cause is that filepath.Base on Linux does not treat backslashes as path separators, so Windows-style parent directory components (e.g., ..\..\Windows\System32...

CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

UBUNTU-CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

CVE-2026-65612 Shell Command Injection in nnn

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

EUVD-2026-62401

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

EUVD-2026-58741

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

CVE-2026-19679

Affects Security Center; CVE-2026-19679 is described as an input validation issue in the file-upload handling where insufficient sanitization of filenames could contribute to a downstream command injection. Tenable’s advisory for Security Center version 6.9.0 notes fixes that upgrade core compone...

CVE-2026-19679 Improper Input Validation

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...