69590 matches found
VisiData VisiData unzip_http RemoteZipFile extract path traversal vulnerability
Summary A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability. Confirmed Vulnerable...
Linux Distros Unpatched Vulnerability : CVE-2026-105840
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files...
CVE-2021-43798
usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: the following arguments are required: -H/--host example: python3 grafana-exploit.py --host if successfuly read arbitary-file situation show the request URL and curl command +RequestURL...
cve-2026-87902-poc
CVE-2026-87902 — WordPress Core: path traversal non autenticato nella risoluzione dei template di pagina Inclusione locale non autenticata di file PHP in WordPress Core tramite un valore pagename con doppia codifica — e, in specifiche condizioni di deployment, esecuzione di codice PHP con i...
CodePath_Week_7-8
CodePath Semana 7-8 Tarea de CodePath para las Semanas 7 y 8: CVE-2017-14719, CVE-2019-9787 y Modificación no autenticada del contenido de Páginas/Entradas vía REST API Proyecto 7 - Pentesting de WordPress Tiempo dedicado: 16 horas en total Objetivo: Encontrar, analizar, recrear y documentar...
CVE-2026-106491
Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...
CVE-2026-106486
Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...
CVE-2026-106491 Backstage: Improper input validation in proxy-backend
Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...
CVE-2026-106491
The Backstage framework, an open framework for building developer portals, is vulnerable to improper input validation within the @backstage/plugin-proxy-backend package in versions prior to 0.6.17 . An authenticated user can craft a request URL that forces the proxy-backend to forward requests to...
CVE-2026-106491
Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...
CVE-2026-106491 Backstage: Improper input validation in proxy-backend
Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...
CVE-2026-79805
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system...
CVE-2026-79809
An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...
CVE-2026-79800
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...
CVE-2026-101153
On affected versions of CloudVision Portal on-premises or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor...
CVE-2026-105840
A flaw was found in lrzsz. The lrz receive utility fails to properly sanitize absolute file paths in restricted mode, only checking for relative path traversal sequences. A remote attacker transmitting files can exploit this vulnerability to write or overwrite arbitrary files outside the intended...
[SECURITY] [DSA 6546-1] rails security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6546-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 06, 2026 https://www.debian.org/security/faq -...
CVE-2026-101153 Security Advisory 0188
On affected versions of CloudVision Portal on-premises or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor...
CVE-2026-101153
A path traversal vulnerability exists in CloudVision Portal (on-premises) and CloudVision Sensor . An authenticated user with high privileges could exploit this flaw to extract unintended data from the Sensor. The vulnerability is associated with CWE-22 (Improper Limitation of a Pathname to a Res...
EUVD-2026-93949
On affected versions of CloudVision Portal on-premises or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor...