77 matches found
OneNav v0.9.35-20240318 - Server-Side Request Forgery (SSRF)
OneNav v0.9.35-20240318 is vulnerable to server-side request forgery SSRF via the url parameter in the getlinkinfo API. An attacker can force the server to make arbitrary requests, potentially accessing internal resources. id: CVE-2024-33832 info: name: OneNav v0.9.35-20240318 - Server-Side Reque...
CVE-2026-88621
OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controll...
EUVD-2026-78864
OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controll...
PT-2026-92116
OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controll...
CVE-2026-88621
OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controll...
CVE-2026-88621
OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controll...
CVE-2026-75464
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
CVE-2026-75464
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
CVE-2026-75464
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
EUVD-2026-65146
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
PT-2026-81034
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import link...
CVE-2026-75464
OneNav version 1.2.4 is affected by an authenticated arbitrary file deletion vulnerability. The flaw originates from the import_link() function, which allows an authenticated user to delete files on the system. No specific remediation steps or exploit links are provided in the documents.
CVE-2026-75464
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
CVE-2022-26276
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...
EUVD-2021-24611
Malware in sbrugna...
EUVD-2021-25150
Malware in sbrugna...
EUVD-2022-30837
Malicious code in bioql PyPI...
EUVD-2023-59391
Malicious code in bioql PyPI...