1348 matches found
RawrXDA
RawrXD PE Writer - Complete Implementation Overview This is a complete PE32+ writer and machine code emitter implemented in pure x64 MASM assembly with zero dependencies and no CRT usage. It generates runnable Windows executables from scratch. Architecture The PE writer follows a backend designer...
flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
Apache-Solr-RCE-via-Velocity-template
Apache-Solr-RCE-via-Velocity-template Reference link Vulnerability Cause: 1. When an attacker can directly access the Solr console, they can modify the node's configuration file by sending a POST request similar to /nodename/config. 2. Apache Solr integrates the VelocityResponseWriter plugin by...
openlore-PoC
Path Traversal in OpenLore Spec-Generation Writer via Unsanitized LLM-Derived domain Field CVE status: requested, pending assignment. This finding is published as GHSA-5j8x-q7q6-58j5. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-openlore-PoC and this banner is replaced with the CVE...
CLEANSTART-2026-JP40387 writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster
Security vulnerability affects the temporal-server package. A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster...
CLEANSTART-2026-NB25503 writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster
CVE-2026-5199 affects multiple packages. A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. See references for individual vulnerability details...
[SECURITY] Fedora 45 Update: isoimagewriter-26.08.2-1.fc45
The KDE ISO Image Writer is a tool to write a .iso file to a USB disk...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146974)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146974 advisory. An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a...
CVE-2026-91115 - RCE via i18nTextCollectorTask writer parameter
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91115...
Highcharts input validation error vulnerability
Versions prior to Highcharts 13.1.0, Dashboards versions 1.0.0 through 4.2.3, and Grid Pro versions 2.0.0 through 3.2.0 contain an input validation error vulnerability. This vulnerability arises because DataTable’s single-cell writer uses untrusted column IDs as keys without rejecting proto or...
GHSA-VP88-798V-H67F rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
In rustls 0.23.44 and 0.23.45, application data that a client buffers before the handshake completes is sent to the server even when the server rejects Encrypted Client Hello ECH. When the server rejects ECH, the client completes the handshake with the outer ClientHello and authenticates the serv...
flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
Virtualenv: Generated Files Can Follow Existing Destination Links
Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environment. The template writer tests exists before unlinking, which misses dangling symlinks; the configuration writer opens the existing path directly. Anthropic's OSS Scanner reported...
virtualenv: Generated files can follow existing destination links
Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environment. The template writer tests exists before unlinking, which misses dangling symlinks; the configuration writer opens the existing path directly. Anthropic's OSS Scanner reported...
CVE-2026-114404
PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attribut...
CVE-2026-114404 PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions
PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attribut...
CVE-2026-114404
PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting (XSS) vulnerability within its HTML writer. The root cause is the failure to properly escape certain presentation content attributes, specifically text runs , hyperlink relationship targets , and shape descr attributes . An attacker ...
CVE-2026-114404 PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions
PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attribut...
CVE-2026-114404 PHPPresentation 1.2.0 XSS via Writer\HTML Text Runs, Hyperlinks and Descriptions
PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attribut...
CVE-2026-114404
PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attribut...