GHSA-R7VR-WG3F-8HR9 Concrete5 CMS contains an XPath injection vulnerability

Concrete5 CMS version 9.1.3 contains an XPath injection vulnerability that allows attackers to manipulate URL path parameters with malicious payloads. Attackers can flood the system with crafted requests to potentially extract internal content paths and system information...

PT-2026-2973

Concrete5 CMS version 9.1.3 contains an XPath injection vulnerability that allows attackers to manipulate URL path parameters with malicious payloads. Attackers can flood the system with crafted requests to potentially extract internal content paths and system information...

The vulnerability of the NTLM (NT LAN Manager) protocol implementation in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the NTLM NT LAN Manager protocol in Windows operating systems is related to incorrect external handling of file names or file paths when processing hashes. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

CVE-2022-50807

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2025-68470

React Router is a router for React. In versions 6.0.0 through 6.30.1 and 7.0.0 through 7.9.5, an attacker-supplied path can be crafted so that when a React Router application navigates to it via navigate, , or redirect, the app performs a navigation/redirect to an external URL. This is only an...

CVE-2026-20931

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182...

Flame II HSPA USB Modem 代码问题漏洞

The Flame II HSPA USB Modem is a wireless network card from Flame. The Flame II HSPA USB Modem suffers from a code issue vulnerability that stems from the presence of unquoted service paths in the Windows service configuration, which could lead to an attacker executing arbitrary code with elevate...

Connectify Hotspot 代码问题漏洞

Connectify Hotspot is a virtual router software from Connectify USA. Connectify Hotspot 2018 suffers from a code issue vulnerability that stems from the presence of unquoted service paths in ConnectifyService, which could lead to the execution of arbitrary code by a local attacker...

WOW21 代码问题漏洞

WOW21 is an unofficial Windows Office activation software by ilwebmaster Personal Developer. A code issue vulnerability exists in WOW21 version 5.0.1.9, which stems from the presence of unquoted service paths that could allow a local attacker to execute arbitrary code with elevated system...

Cain & Abel 代码问题漏洞

Cain & Abel is a password recovery tool from Cain & Abel. A code issue vulnerability exists in Cain & Abel version 4.9.56, which stems from the presence of unquoted service paths that could lead to a local attacker executing arbitrary code with elevated privileges...

PT-2026-37502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the tegra channel try format function. The issue arises because two error paths return immediately after the v4l2 subdev call function fails, failing to call v4l2...

Tftpd32 SE 代码问题漏洞

Tftpd32 SE is an IPv4 web server suite from the Tftpd open source. A code issue vulnerability exists in Tftpd32 SE version 4.60, which stems from unquoted service paths and could lead to a local attacker executing arbitrary code with elevated privileges...

CakePHP 5.3.1 Released

CakePHP 5.3.1 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 5.3.1. This is a maintenance release for the 5.3 branch that fixes community reported issues, regressions and a security issue with PaginatorHelper. Bugfixes You can expect the following change...

Emerson PAC Machine Edition 代码问题漏洞

Emerson PAC Machine Edition is a development environment software from Emerson USA. A code issue vulnerability exists in Emerson PAC Machine Edition version 9.80, which stems from the presence of unquoted service paths to the TrapiServer service, which could lead to code execution by a local user...

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Outline 代码问题漏洞

Outline is an Outline open source knowledge base. A code issue vulnerability exists in Outline version 1.6.0, which stems from unquoted service paths and could lead to a local attacker executing arbitrary code with elevated system privileges...

Private Internet Access 代码问题漏洞

Private Internet Access PIA is a VPN software from Private Internet Access, Inc. A code issue vulnerability exists in Private Internet Access PIA version 3.3, which stems from the presence of unquoted paths in the service configuration that could lead to the execution of arbitrary code by a local...

CVE-2026-22783

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the filelocalname field combined with path trust in the delete operation...

EUVD-2026-2004

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the filelocalname field combined with path trust in the delete operation...