66870 matches found
CVE-2026-78654 cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution
A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...
Directory Traversal
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Directory Traversal via the mediadirectory function. An attacker can enumerate and access files outside the intended scope by supplying...
Duplicate Advisory: Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-47ch-6w46-6xm7. This link is maintained to preserve external references. Original Description Grav CMS before 2.0.16 contains a path traversal vulnerability in the mediadirectory Twig function that fails to...
CVE-2026-72697
Grav CMS before 2.0.16 contains a path traversal vulnerability in the mediadirectory Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope. Attackers with page authoring privileges can supply arbitrary filesystem...
SUSE CVE-2026-19200
The Velociraptor verify VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without the required permissions. The attacker...
CVE-2026-72697 Grav CMS before 2.0.16 Path Traversal via media_directory
Grav CMS before 2.0.16 contains a path traversal vulnerability in the mediadirectory Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope. Attackers with page authoring privileges can supply arbitrary filesystem...
CVE-2026-72697
Grav CMS before 2.0.16 contains a path traversal vulnerability in the media_directory() Twig function, which fails to validate filesystem paths. Authenticated users with page authoring privileges can supply arbitrary filesystem paths and, via the allow-listed filepath accessor on Medium objects, ...
CVE-2026-72697 Grav CMS before 2.0.16 Path Traversal via media_directory
Grav CMS before 2.0.16 contains a path traversal vulnerability in the mediadirectory Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope. Attackers with page authoring privileges can supply arbitrary filesystem...
CVE-2026-72697 Grav CMS before 2.0.16 Path Traversal via media_directory
Grav CMS before 2.0.16 contains a path traversal vulnerability in the mediadirectory Twig function that fails to validate filesystem paths, allowing authenticated users to enumerate and access files outside intended scope. Attackers with page authoring privileges can supply arbitrary filesystem...
SUSE CVE-2026-68767
hashcat's fgetl function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZLARGE...
SUSE CVE-2026-77413
JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited...
EUVD-2026-65177
A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...
The vulnerability of the jumbo_frm() function in the drivers/net/ethernet/stmicro/stmmac/chain_mode.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jumbofrm function in the drivers/net/ethernet/stmicro/stmmac/chainmode.c file of the Ethernet network adapter driver for the Linux operating system is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the lookup() function in the child_process module of the json-data transformation software JSONata allows a attacker to execute arbitrary code.
The vulnerability of the lookup function in the childprocess module of the json-data transformation software JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the send_done() function in the fs/smb/server/transport_rdma.c file of the Smb kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the senddone function in the fs/smb/server/transportrdma.c file of the Smb kernel of the Linux operating system is related to improper handling of the absence of a special element. Exploiting this vulnerability can allow an attacker, acting remotely, to compromise the...
The vulnerability of the as102_usb_probe() function in the drivers/media/usb/as102/as102_usb_drv.c driver for Linux-based USB multimedia devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
CVE-2026-52491
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main component...
PT-2026-81140
Name of the Vulnerable Software and Affected Versions Grav CMS versions prior to 2.0.16 Description An issue exists in the media directory Twig function that fails to validate filesystem paths. Authenticated users with page authoring privileges can provide arbitrary filesystem paths to this...
CVE-2026-52491
The libtiff library (version 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938) contains a vulnerability that allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component. Affected systems using Amazon Linux 2 can remediate this by updating to libtiff-4.0.3-35.amzn2.0.3...
