Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/10/01 3:17 p.m.•19 views

NotCVE-2026-0009

Уязвимость Path Traversal в nitroshare Описание NitroShare Desktop v0.3.4 содержит уязвимость path traversal в своём LAN-сервере передачи файлов. Сервер прослушивает все сетевые интерфейсы порт 40818 без аутентификации. При получении файлов поле name из JSON-заголовка элемента отправителя...

7.8CVSS8.1AI score0.00087EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2026/08/27 12:00 a.m.•29 views

NitroShare Desktop 0.3.4 Path Traversal

NitroShare Desktop version 0.3.4 contains a path traversal vulnerability in its LAN file transfer receive path. The transfer service is reachable from the local network on TCP port 40818 and processes incoming transfer metadata without authentication in the reported default configuration. A...

7.8CVSS8AI score0.00087EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/07/31 10:01 p.m.•20 views

NotCVE-2026-0009 — Updated!

Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...

8.7CVSS8.9AI score0.01115EPSS
SaveExploits2References1
CVE
CVE
•added 2026/07/27 2:19 p.m.•44 views

CVE-2026-66050

NitroShare Desktop 0.3.4 is affected by a path traversal flaw in the LAN file transfer server. An unauthenticated network attacker can craft a filename in the JSON item header name field to write arbitrary files outside the transfer root, including into the Windows Startup folder, enabling persis...

8.7CVSS6.2AI score0.01115EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/27 2:19 p.m.•16 views

CVE-2026-66050 NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server

NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...

8.7CVSS6.2AI score0.01115EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•7 views

CVE-2026-66050: Improper Limitation of a Pathname to a Restricted Directory

NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...

8.7CVSS6.2AI score0.01115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•32 views

PT-2026-64959

Name of the Vulnerable Software and Affected Versions NitroShare Desktop versions prior to 0.3.5 Description The LAN file transfer server contains a path traversal issue that allows unauthenticated attackers on the same network to write arbitrary files. This occurs because the server fails to...

8.7CVSS6.2AI score0.01115EPSS
SaveExploits0References4
Rows per page
Query Builder