GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

CVE-2026-0827

CVE-2026-0827 The LdeApi.Server.exe process attempts to write MP27AM7Westimation.json to C:\ProgramData\Lenovo\LDE\SYSTEM without impersonation. This directory does not exist by default. Since C:\ProgramData\ allows standard users to create subdirectories, a low-privileged user can create this pa...

CVE-2024-4956

CVE-2024-4956 - Path Traversal no autenticado en Nexus Repository Manager 3 Nexus Repository Manager es un gestor de repositorios que organiza, almacena y distribuye artefactos necesarios para el desarrollo. Se ha descubierto una vulnerabilidad de path traversal en Nexus Repository 3, en versione...

CVE-2024-24919

Exploit CVE-2024-24919 Resumen Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-24919, una vulnerabilidad crítica descubierta en Check Point SVN. La vulnerabilidad permite leer archivos del sistema. ID de CVE : CVE-2024-24919 Gravedad : Crítica Tabla de contenidos...

Arbitrary file manipulation vulnerability exists in the Brocade Fabric OS WebTools management

: An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file...

LocalPotato_CVE-2023-21746

Una vulnerabilidad de escalada de privilegios local LPE en Windows fue reportada a Microsoft el 9 de septiembre de 2022 por Andrea Pierini @decoderit y Antonio Cocomazzi @splintercode. La vulnerabilidad permitiría a un atacante con una cuenta de bajos privilegios en un host leer/escribir archivos...

CVE-2021-36934-export-shadow-volume-POC

CVE-2021–36934 El hash derivado se utiliza para falsificaciones como PTH y tickets. No se proporciona un análisis detallado aquí. Además, dado que se pueden obtener derechos de acceso a la mayoría de los archivos del sistema, debería haber más métodos de explotación además de este, incluidos los...

SparstanBoogie

SparstanBoogie's origins were tested reportedly on iOS/iPadOS 15.2 - 16.7 RC 20H18 and 17.0 however, tests have been conducted up to 26.1 26.1. Also any testing on devices above or under whats been reported is welcomed as it may come back in newer devices so theres no reason to shrug off any good...

CVE-2025-43537

CVE-2025-43537 Crédito de Seguridad de Apple Investigador: Al Sadman Awal Oficialmente acreditado por Apple Product Security por la divulgación responsable de CVE-2025-43537. Resumen CVE-2025-43537 es una vulnerabilidad de seguridad identificada durante una investigación de seguridad independient...

CVE-2026-51853

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction...

CVE-2026-93468 HGiga｜OAKlouds - Arbitrary File Read

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-84609

A permissions issue exists in several Apple operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause is related to insufficient path validation , which could allow an application to mod...

CVE-2026-86886: Improper Limitation of a Pathname to a Restricted Directory

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

PT-2026-91687

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 watchOS versions prior to 27 Description A path traversal issue exists due to insufficient input validation. This flaw allows an...

EUVD-2026-74725

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...

CVE-2026-78452

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78451

CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

PT-2026-87997

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

CVE-2026-78452: Out-of-bounds Read

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...