28264 matches found
ca.uhn.hapi.fhir/org.hl7.fhir.utilities: HAPI FHIR XsltUtilities: XML External Entity injection allows local file disclosure and SSRF
A flaw was found in the HAPI FHIR XsltUtilities component. The saxonTransform functions within this utility do not adequately restrict external entity access when processing XML. This oversight allows an attacker, who can control or tamper with the XML data being transformed, to inject malicious...
CVE-2026-58420
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-58420
CVE-2026-58420 covers a Local File Inclusion (LFI) in Gitea’s Migration Restore. The vulnerability arises because the restore path feeds user-supplied asset.DownloadURL directly into a helper that supports both http/https and file:// schemes, with no validation to restrict to HTTP(S). An attacker...
CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore
Local File Inclusion via file:// URI in Migration Restore...
CVE-2026-73505
creationtimestamp| type| source ---|---|--- 2026-08-13 16:35:07+00:00| published-proof-of-concept| https://github.com/JanDeDobbeleer/oh-my-posh/security/advisories/GHSA-6xj8-qv9j-xcjq...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
EUVD-2026-58073
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...
CVE-2026-73574
Zimbra Collaboration versions before 10.1.17 are affected by a local file inclusion (LFI) vulnerability in the Forward servlet of the Classic Web Client. The root cause is improper validation of the fu request parameter, allowing an unauthenticated attacker to supply a crafted path and disclose p...
CVE-2026-66657
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66656
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-66653
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
CVE-2026-66450
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...
CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66657
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66656
CVE-2026-66656 describes an unauthenticated Local File Inclusion in the WordPress Foton Core plugin, versioned = 1.1.2 is advised, but a concrete fix/version is not specified in the provided data.