5 matches found
NotCVE-2026-0009
nitroshare में पाथ ट्रैवर्सल भेद्यता विवरण NitroShare Desktop v0.3.4 में उसके LAN फ़ाइल ट्रांसफ़र सर्वर में एक पाथ ट्रैवर्सल भेद्यता मौजूद है। सर्वर बिना प्रमाणीकरण के सभी नेटवर्क इंटरफ़ेस पोर्ट 40818 पर सुनता है। फ़ाइलें प्राप्त करते समय, प्रेषक के JSON आइटम हेडर से name फ़ील्ड को यह सत्यापित कि...
CVE-2026-66050
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
CVE-2026-66050
NitroShare Desktop 0.3.4 is affected by a path traversal flaw in the LAN file transfer server. An unauthenticated network attacker can craft a filename in the JSON item header name field to write arbitrary files outside the transfer root, including into the Windows Startup folder, enabling persis...
CVE-2026-66050 NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
PT-2026-64959
Name of the Vulnerable Software and Affected Versions NitroShare Desktop versions prior to 0.3.5 Description The LAN file transfer server contains a path traversal issue that allows unauthenticated attackers on the same network to write arbitrary files. This occurs because the server fails to...