141272 matches found
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-106186
Google Chrome on Windows versions prior to 155.0.8059.39 is affected by an uncontrolled search path element in the CredentialProvider component. This vulnerability (CWE-427) allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. While the Chromium s...
cve-2025-48384-poc
PoC para CVE-2025-48384 Esta prueba de concepto demuestra la vulnerabilidad de análisis incorrecto de submódulos con rutas CR retorno de carro de Git, lo que lleva a la ejecución arbitraria de hooks durante git clone --recurse-submodules. ⚠️ Advertencia Esto es solo para fines educativos y de...
Exploit for CVE-2026-21589
CVE-2026-21589 - Atlassian Data Center Una...
CVE-2026-31156
CVE-2026-31156 There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters passed in from the command line. Attackers can read any readable file by constructing malicious paths, posing a risk of information...
CVE-2026-106103
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
EUVD-2026-93778
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2026-86360
Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2024-6648
CVE-2024-6648 Plantilla de Nuclei para CVE-2024-6648, traversal de ruta absoluta en el plugin ApPage Builder de Prestashop. Uso: nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml...
CVE-2026-71168
Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
EUVD-2026-93774
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
npm-tar-path-traversal-scanner
CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...
CVE-2023-31747
Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: Las versiones = wmic service get name,pathname,displayname,startmo...