81273 matches found
CVE-2026-19757
CVE-2026-19757 affects Dromara lamp-cloud up to version 5.10.0, specifically the File-Upload Controller FileAnyoneController.java. The vulnerability arises from manipulation of the bucket/bizType argument, enabling path traversal. Exploitation is remote and an exploit has been made public. The de...
CVE-2026-19757
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
CVE-2026-19757 Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
CVE-2026-19757 Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...
CVE-2026-72841 luci-app-openvpn Path Traversal RCE via instance_name2
luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...
CVE-2026-72841
luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...
CVE-2026-72642 Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...
EUVD-2026-58287
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...
CVE-2026-72642
The CVE notes a flaw in Elasticsearch’s native ML inference where a model operation computes a memory address from an offset without bounds checking, enabling heap corruption that can crash the inference process and potentially allow arbitrary code execution within that process. Affected configur...
CVE-2026-72642 Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...
CVE-2026-59763
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
CVE-2026-56755
Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...
CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
EUVD-2026-58125
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
CVE-2026-59763
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads...
CVE-2026-58428 Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
Release attachment extension allowlist bypass via web release edit form variant of CVE-2025-68939...