12 matches found
GLSA-202604-04 : DTrace: Arbitrary file creation via dtprobed
The remote host is affected by the vulnerability described in GLSA-202604-04 DTrace: Arbitrary file creation via dtprobed A vulnerability has been found in dtprobed that allows for arbitrary file creation through specially crafted USDT provider names. Tenable has extracted the preceding descripti...
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
Allocation of Resources Without Limits or Throttling
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the authentication process. An unauthenticated attacker can exhaust...
CVE-2026-33538: Uncontrolled Resource Consumption
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.58 and 9.6.0-alpha.52, an unauthenticated attacker can cause denial of service by sending authentication requests with arbitrary, unconfigured provider names. The server...
Parse Server 资源管理错误漏洞
Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that runs Node.js. Versions of Parse Server prior to 8.6.58 and 9.6.0-alpha.52 contain a resource management vulnerability. This vulnerability stems from an unauthenticated attacker...
EUVD-2026-12522
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
DEBIAN-CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
CVE-2026-21991
The CVE-2026-21991 issue affects the DTrace component dtprobed, specifically its handling of USDT probes, enabling arbitrary file creation through crafted provider names. Multiple connected advisories confirm dtprobed as the vulnerable element and describe the risk of code execution as a worst-ca...
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
PT-2026-25827
Name of the Vulnerable Software and Affected Versions DTrace affected versions not specified Description The DTrace component, dtprobed, is subject to an issue that permits arbitrary file creation via specially crafted USDT provider names. The issue involves the use of crafted names to trigger th...