printix-CVE-2022-25090

CVE-2022-25090 Em vez de imprimir seu dever de casa como usuário, imprima suas políticas de segurança do sistema como SYSTEM por diversão. Explore a documentação » Ver Demonstração . Reportar Bug . Solicitar Recurso Índice Sobre o Projeto Construído Com Começando Pré-requisitos Instalação Uso...

CVE-2014-5284

CVE-2014-5284 CVE-2014-5284 का बैश कार्यान्वयन एक्सप्लॉइट शीर्षक: ossec 2.8 असुरक्षित अस्थायी फ़ाइल निर्माण भेद्यता विशेषाधिकार वृद्धि पायथन अच्छा है लेकिन हर समय काम नहीं करता एक्सप्लॉइट लेखक: mbadanoiu पायथन एक्सप्लॉइट लेखक: skynet-13 विक्रेता होमपेज: www.ossec.net/ सॉफ्टवेयर लिंक:...

Safenet_SAC_CVE-2021-42056

Safenet Authentication Client Privilege Escalation CVE-2021-42056 Basierend auf der Thales-Website 1 ist SafeNet Authentication Client eine Middleware-Client-Software, die das umfangreiche SafeNet-Portfolio von Thales an zertifikatsbasierten Authentifikatoren verwaltet, darunter eTokens, SafeNet...

PoC_CVE-2023-24055

PoCCVE-2023-24055 Wie ausführen ? Bearbeiten Sie die Variable $User im Skript und ersetzen Sie den Wert durch Ihren Benutzernamen. Öffnen Sie eine PowerShell als Administrator und führen Sie das Skript aus: root@kitploit: ./PoCCVE-2023-24055.ps1 Nach der Skriptausführung öffnen Sie KeePass. Das...

EUVD-2026-45030

Whistle vulnerable to path traversal...

EUVD-2026-62445

phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin...

CVE-2026-19474

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

EUVD-2026-59761

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-19474

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-18549

The CVE-2026-18549 issue affects @fastify/multipart versions 5.3.0 through 10.1.0. When the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the stream remains open. If the client aborts before the terminating boundary is sent, abort cleanup...

EUVD-2026-59759

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

CVE-2026-41179 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2022-0587 vulnerabilities

Vulnerabilities for packages: opa...

GO-2024-2860 vulnerabilities

Vulnerabilities for packages: goreleaser...

CVE-2026-73584

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the /tmp directory. By repeatedly recreating a symbolic link, the attacker can redirect privileged output to an arbitrary file. Th...

UBUNTU-CVE-2026-73585

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during scri...

CVE-2026-73584

The CVE-2026-73584 issue affects sblim-sfcb. A race condition during privileged instance migration allows a local, low-privileged attacker to manipulate a temporary file in /tmp and repeatedly recreate a symlink to redirect privileged output to an arbitrary file, potentially causing privileged fi...

Linux Distros Unpatched Vulnerability : CVE-2026-73584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...