96599 matches found
CVE-2026-21668
Technical details about CVE-2026-21668 are not provided in the supplied documents. Monitor for updates from Veeam (KB4830) and related advisories for affected products, impact, and remediation.
EUVD-2026-7413
ImageMagick: Heap overflow in pcd decoder leads to out of bounds read...
EUVD-2026-11561
SGLangs replayrequestdump.py contains an insecure pickle.load without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the initializesections function of the Object File Handler. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted object files to the application during local...
PT-2026-25032
Name of the Vulnerable Software and Affected Versions Magic Wormhole versions 0.21.0 through 0.22.9 Description Magic Wormhole allows the transfer of files and directories of arbitrary size between computers. A flaw exists where receiving a file wormhole receive from a malicious party between...
Veeam Backup And Replication ๅฎๅ จๆผๆด
Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. Veeam Backup and Replication has a security vulnerability that allows authenticated domain users to bypass restrictions and manipulate any file within the backup repository...
Magic Wormhole ่ทฏๅพ้ๅๆผๆด
Magic Wormhole is a secure cross-computer file transfer tool developed under the open-source Magic-Wormhole project. Versions of Magic Wormhole from 0.21.0 to 0.23.0 contained a path traversal vulnerability. This vulnerability could allow malicious files to overwrite critical local files,...
Linux Distros Unpatched Vulnerability : CVE-2026-23907
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example...
CVE-2025-70873
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...
๐ Microsoft Windows Cloud Files Mini Filter Driver Local Privilege Escalation
Proof of concept exploit for a heap-based buffer overflow vulnerability in the Windows Cloud Files Mini Filter Driver cldflt.sys that allows local attackers to escalate privileges from user-level to SYSTEM-level access on affected Windows systems. The vulnerability exists in the Cloud Files Mini...
Black ่ทฏๅพ้ๅๆผๆด
Black is a Python code formatting tool open-sourced by the Python Software Foundation. Versions of Black prior to 26.3.1 had a path traversal vulnerability. This vulnerability stemmed from the value of the โpython-cell-magicsโ option, which did not clean up cache file names. As a result, it was...
Tolgee ไปฃ็ ้ฎ้ขๆผๆด
Tolgee is an open-source, multilingual translation and localization platform developed by Tolgee itself. It aims to help development teams easily manage and maintain multilingual software applications and websites. Versions of Tolgee prior to 3.166.3 contained code vulnerabilities. These...
DataEase ่ทฏๅพ้ๅๆผๆด
DataEase is an open-source data visualization and analysis tool developed by DataEase. It helps users quickly analyze data and gain insights into business trends, thereby enabling improvements and optimizations in operations. Versions of DataEase prior to 2.10.20 contained a path traversal...
OpenClaw Arbitrary File Read Vulnerability (CNVD-2026-13555)
OpenClaw is a tool for configuration management that supports loading external configuration files via the include directive. An arbitrary file read vulnerability exists in OpenClaw. An attacker can use this vulnerability to read sensitive files, such as API keys and credentials, outside of the...
PT-2026-24954
Name of the Vulnerable Software and Affected Versions Veeam Backup and Replication affected versions not specified Description The software contains a flaw that allows an authenticated domain user to bypass intended restrictions. This allows manipulation of arbitrary files located on a Backup...
TinaCMS ่ทฏๅพ้ๅๆผๆด
TinaCMS is an open-source headless CMS for Markdown, MDX, and JSON developed by Tina. Versions of TinaCMS prior to 2.1.8 had a path traversal vulnerability. This vulnerability stemmed from the media endpoints exposed by the TinaCMS CLI development server, which allowed for path traversal attacks...
CVE-2025-66955
Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls...
OpenClaw File Inclusion Vulnerability
OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from a file inclusion vulnerability. An attacker can exploit this vulnerability to read arbitrary files in the local file system...
Asseco SEE Live ๅฎๅ จๆผๆด
Asseco SEE Live is a real-time customer interaction and notification management system for financial services offered by the Polish company Asseco. Version 2.0 of Asseco SEE Live contains a security vulnerability. This vulnerability stems from local file inclusion in the Contact Plan, E-Mail, SMS...
ProjectSend ่ทฏๅพ้ๅๆผๆด
ProjectSend cFTP is an open-source hosted application based on PHP and MySQL by ProjectSend. Versions of ProjectSend cFTP prior to r1945 contained a path traversal vulnerability. This vulnerability stemmed from the incorrect handling of the files parameter in the Delete Handler component, which...