2893 matches found
CVE-2026-22444
CVE-2026-22444 Apache Solr UNCパス検証の脆弱性 概要 この脆弱性は2025年に発見され、Apacheに開示されました。Apache Solrのコア作成機能に影響を及ぼし、パス検証チェックが実行される前にUNCパスへのネットワークアクセスが発生します。 スタンドアロンモードで動作するWindowsシステムでは、認証が有効でない場合やユーザーがコアを作成する権限を持っている場合に、RCEが発生します。 開示 この脆弱性はApacheに報告され、oss-securityメーリングリストで公開されました： 公式アドバイザリ：...
zimaos-cve-2026-28286-arbitrary-file-write
🚨 CVE-2026-28286 — ZimaOS 任意文件写入 从 API 配置错误 → 任意文件写入 → 潜在的系统沦陷 ⚡ 快速摘要 端点： /v21/files/file 问题： 缺少路径验证 影响： 可在预期目录之外进行任意文件写入 严重性： 🔴 严重 🧪 快速开始 git clone https://github.com/Rushi9/zimaos-cve-2026-28286-arbitrary-file-write.git cd zimaos-cve-2026-28286-arbitrary-file-write pip install -r requirements.t...
cve-2021-41773-lab
CVE-2021-41773 — 최소 FastAPI 랩 파일 시스템 경계를 검증하기 전에 사용자 입력을 디코딩하면 디렉터리 트래버설 및 로컬 파일 포함LFI으로 이어질 수 있음을 보여주는 작고 독립적인 FastAPI 랩입니다. Apache HTTP Server의 CVE-2021-41773 문제를 모델로 삼았습니다. 기능 최소한의 읽기 쉬운 FastAPI 예제: 취약한 서버와 패치된 서버 단일 인코딩%2e 및 이중 인코딩%252e 우회를 시연 루트 엔드포인트에 curl로 테스트할 수 있는 빠른 페이로드 포함 Docker 불필요 —...
CVE-2026-39813
🛡️ CVE-2026-39813 - Fortinet FortiSandbox 경로 탐색 취약점 📌 개요 CVE-2026-39813 은 Fortinet FortiSandbox에 영향을 미치는 심각한 경로 탐색 취약점 입니다. 이 취약점은 사용자가 제공한 파일 경로에 대한 부적절한 검증으로 인해 발생하며, 공격자가 ../와 같은 디렉터리 탐색 시퀀스를 조작하여 의도된 디렉터리 구조 외부의 승인되지 않은 파일에 접근할 수 있게 합니다. ⚠️ 영향을 받는 버전 이 문제는 다음 버전에 영향을 미칩니다: FortiSandbox 4.4.0 –...
CVE-2025-65345
CVE-2025-65345 – laravel-file-manager v3.3.1의 ZIP 기능에서 발생하는 인증된 경로 탐색으로 인한 파일시스템 정보 노출 🧭 개요 laravel-file-manager v3.3.1 및 이하 버전에 존재하는 인증된 디렉토리 경로 탐색 취약점으로 인해, 파일 관리자 인터페이스에 접근할 수 있는 공격자는 부적절한 경로 검증을 악용하여 의도된 범위를 벗어난 파일과 디렉터리가 포함된 zip/아카이빙 기능을 사용해 아카이브를 생성할 수 있습니다. 🧱 영향을 받는 구성 요소 프로젝트:...
Rocky Linux 9 [CIQ] Security Update: mariadb / mariadb-backup / mariadb-backup-debuginfo / etc (crlsa-2026_0137)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260137 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding descripti...
Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / galera / etc (crlsa-2026_0225)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260225 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding descripti...
PT-2026-103954
Name of the Vulnerable Software and Affected Versions Capacitor versions prior to 6.2.2 Capacitor versions prior to 7.6.9 Capacitor versions prior to 8.3.5 Capacitor versions prior to 8.4.3 Capacitor versions prior to 8.5.1 Description The Android and iOS WebView navigation guard validates the ho...
Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / galera / etc (crlsa-2026_0232)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260232 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding descripti...
Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / galera / etc (crlsa-2026_0233)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260233 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding descripti...
Rocky Linux 8 [CIQ] Security Update: java-11-openjdk / java-11-openjdk-debuginfo / etc (crlsa-2023_5742)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235742 advisory. OpenJDK: certificate path validation issue during client authentication 8309966 CVE-2023-22081 Tenable has extracted the preceding description block directly from t...
Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / Judy-devel / asio-devel / etc (crlsa-2026_0698)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20260698 advisory. mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation CVE-2025-13699 Tenable has extracted the preceding descripti...
CVE-2026-102141 Kiteworks Core Privilege Escalation through External Control of File Name or Path
Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto another node and cause them to be executed there. Exploitation requires backend root access on a cluster node and a...
EUVD-2026-89993
OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify arbitrary directories outside configured save locations to read and write files through manifest and sync routes...
CVE-2026-10726
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
EUVD-2026-89780
Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...
CVE-2026-10726
The Cato Windows SDP Client before version 6.12.6 is vulnerable to an arbitrary file disclosure vulnerability. A low-privileged local user can exploit this flaw to force the Windows service—which operates with Local System privileges—to read and disclose arbitrary local files. The root cause is a...
CVE-2025-56499
CVE-2025-56499 로컬 룰 제공자의 경로 검증 부재로 인한 임의 파일 읽기 업스트림 수정: https://github.com/MetaCubeX/mihomo/pull/2177 영향받는 버전: mihomo = v1.19.11 요약 rule-providers 설정을 파싱할 때 type = "file" 분기에서 제공된 경로를 검증하지 못합니다. schema.Path를 제어하는 인증된 공격자는 제공자가 읽을 수 있는 모든 로컬 파일을 가리키도록 할 수 있습니다. 대부분의 임의 파일은 예상되는 룰 형식을 따르지 않기 때문에, 파...
CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc (CENTOS7:CLSA-2026:1770119166)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1770119166 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security...