69459 matches found
EUVD-2026-55949
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution...
CVE-2026-13716 Path Traversal: '.../...//' in Crafty Controller
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution...
CVE-2026-13716
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution...
CVE-2026-13716
Crafty Controller is affected by CVE-2026-13716, which exposes a path traversal vulnerability in server import and admin file upload. The issue allows a remote, authenticated attacker to upload files to arbitrary paths that the Crafty Controller application can access, enabling remote code execut...
CVE-2026-13716 Path Traversal: '.../...//' in Crafty Controller
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution...
CopyEscape: Taking Over Docker Hosts with docker cp
Imperva Red Team uncovered CVE-2026-17106 , a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed that the same CVE also affected sbx cp when copying files out of Docker Sandboxes. A malicious container or sandbox could exploit the copy proce...
[SECURITY] [DSA 6429-1] caddy security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6429-1 [email protected] https://www.debian.org/security/ Aron Xu August 11, 2026 https://www.debian.org/security/faq -...
Exploit for Path Traversal in Apache Http_Server
AI 오케스트레이션 기반 CVE 분석 — CVE-2021-41773 AI에게 CVE 분석을 시키고, A...
CVE-2026-61632 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-9XWG-3R6F-JCX2 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-67422 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-59935 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-55H5-XMCQ-C37V vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-5XF7-4P34-54QR vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12061 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-59936 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FG7F-2386-8897 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-44763
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on condition...
vuln-scanner
vuln-scanner Scanner de vulnerabilidades web em Python puro...
EUVD-2025-210676
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to...