CVE-2026-117677

The Gitea platform is vulnerable to a denial of service (DoS) attack during the parsing of uploaded Helm charts . The root cause is that the application decompresses the archive and reads every tar entry to locate Chart.yaml without enforcing a limit on the decompressed size, performing this acti...

EUVD-2026-114795

The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories. A user with write access to an archived repository, or a holder of such a user's write-scoped token, could replace or delete release assets while keeping their download...

CVE-2026-116296

In Gitea , certain API routes for releases, release assets, milestones, and repository labels failed to reject modifications to archived repositories. An attacker with write access to an archived repository, or a holder of a write-scoped token, could replace or delete release assets (preserving d...

CVE-2026-116296 Gitea archived repository release, milestone and label modification

The API routes for releases, release assets, milestones and repository labels did not reject changes to archived repositories. A user with write access to an archived repository, or a holder of such a user's write-scoped token, could replace or delete release assets while keeping their download...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

CVE-2022-22948

CVE-2022-22948 Information Disclosure in VMWare vCenter Pentera’s research group discovered a vulnerability in VMWare’s vCenter Server program affecting VMWare’s software installed in 500,000 organizations worldwide responsible to manage their most critical systems Our findings were proactively...

CVE-2018-8065

Flexense HTTP Server Server-Enable web server on port. Module triggers a user space write access violation on syncbrs.exe memory region. Number of requests that will crash the server changes between 200-1000 depending on the OS version and system memory. Sync Breeze Enterprise 10.6.24 version...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version: 10.6.24 Teste...

CVE-2017-7494_IT19115344

CVE-2017-7494IT19115344 A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root...

CVE-2021-25741

About It's exploit for CVE-2021-25741 vulnerability. This vulnerability allows to mount Node filesystem inside of new POD with read-write privileges. You can read more about the vulnerability here: https://security.googleblog.com/2021/12/exploring-container-security-storage.html I'm not author of...

CVE-2026-116964

A flaw in konflux-ci allows an attacker with repository write access to achieve arbitrary code execution within the CI/CD workflow environment. The root cause is the dynamic evaluation of unvalidated script output by manifest synchronization scripts when shell commands are injected into environme...

CVE-2026-116964 Konflux-ci: remote code execution via eval() in manifest scripts

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery CI/CD workflow environment. By injecting shell commands into environment export scripts, the attacker causes manifest...

CVE-2026-50181

CVE-2026-50181 Langroid path traversal in file tools allowed read/write outside the configured current directory. Primary advisory: GHSA-fg23-3346-88f5 GitHub advisory database: github.com/advisories/GHSA-fg23-3346-88f5 Researcher credit: @chaitanyagarware At a Glance Field| Value ---|--- CVE|...

CVE-2026-119569

Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-controlled keys are expanded into objects without own-property checks. Clients with class write access can send dot notation field keys or ACL entry names matching built-in object...

EUVD-2026-113923

Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because user-controlled keys are expanded into objects without own-property checks. Clients with class write access can send dot notation field keys or ACL entry names matching built-in object...

CVE-2026-119569

Parse Server versions before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 are vulnerable to a prototype pollution vulnerability. The root cause is the lack of own-property checks when expanding user-controlled keys into objects. An attacker with class write access can submit dot notation field keys or...

CVE-2026-119126

Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values when building the saved object, so a write is stored but returns an error and skips afterSave triggers and LiveQuery events. A client with write access can exploit this to evade...

CVE-2026-113576

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...

EUVD-2026-113142

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...

CVE-2026-113576 Adobe Digital Editions | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access...