14636 matches found
Directory Traversal
Overview salt is a new approach to infrastructure management built on a dynamic communication bus. Salt can be used for data-driven orchestration, remote execution for any infrastructure, configuration management for any app stack, and much more. Affected versions of this package are vulnerable t...
Directory Traversal
Overview salt is a new approach to infrastructure management built on a dynamic communication bus. Salt can be used for data-driven orchestration, remote execution for any infrastructure, configuration management for any app stack, and much more. Affected versions of this package are vulnerable t...
CVE-2025-49199
The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...
CVE-2025-40592
A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...
CVE-2025-40592
A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...
CVE-2025-40592
CVE-2025-40592 describes a zip path traversal in the Mendix Studio Pro module installation process. The vulnerability affects Mendix Studio Pro versions prior to: 8.18.35, 9.24.35, 10.6.24, 10.12.17, 10.18.7, and 10.23.0, with all versions of 11 affected. By crafting a malicious module (e.g., via...
CVE-2025-40592
A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...
Archive::Unzip::Burst 安全漏洞
Archive::Unzip::Burst is a Perl decompression tool from the Perl community. A security vulnerability exists in Archive::Unzip::Burst 0.09 and earlier versions, which stems from multiple vulnerabilities affecting the bundled InfoZip library...
PT-2025-25283
Name of the Vulnerable Software and Affected Versions Mendix Studio Pro versions prior to 8.18.35 Mendix Studio Pro versions prior to 9.24.35 Mendix Studio Pro versions prior to 10.6.24 Mendix Studio Pro versions prior to 10.12.17 Mendix Studio Pro versions prior to 10.18.7 Mendix Studio Pro...
CVE-2025-40592: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...
SICK Field Analytics和SICK Media Server 数据伪造问题漏洞
SICK Field Analytics and SICK Media Server are both products of SICK GmbH, Germany.SICK Field Analytics is software for evaluating manufacturing data.SICK Media Server is a media server. A security vulnerability exists in SICK Field Analytics and SICK Media Server that stems from an unsigned back...
CVE-2025-3485
Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementati...
CLSA-2025-1748626881 golang: Fix of 2 CVEs
CVE-2024-24789: fix zip parsing to reject EOCDR records with truncated comments - CVE-2024-9355: fix HMAC to pass initialized length to EVPDigestSignFinal, ensuring correct output handling...
Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition (ITNM).
Summary Multiple vulnerabilities were addressed in ITNM version 4.2 Fix Pack 22 4.2.0.22 Vulnerability Details CVEID:CVE-2025-23184 DESCRIPTION: A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the...
📄 Windows File Explorer NTLM Hash Disclosure
Windows File Explorer on Microsoft Windows 11 23H2 proof of concept NTLM hash disclosure exploit. !/usr/bin/env python3 Exploit Title: Windows File Explorer Windows 11 23H2 - NTLM Hash Disclosure Exploit Author: Mohammed Idrees Banyamer Twitter/GitHub:https://github.com/mbanyamer Date: 2025-05-27...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal when using the PathPrefix, Path, or PathRegex route matchers. An attacker can target a backend exposed using another router, by-passing the middleware chain by crafting a request with a manipulated path using...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal when using the PathPrefix, Path, or PathRegex route matchers. An attacker can target a backend exposed using another router, by-passing the middleware chain by crafting a request with a manipulated path using...
ROS-20250526-02
Vulnerability in archive-zip package of Golang programming language is related to incorrect processing of zip files. zip files. Exploitation of the vulnerability could allow an attacker to create an arbitrary zip file...
GO-2025-3703 Ackites KillWxapkg Zip Bomb Resource Exhaustion in github.com/Ackites/KillWxapkg
Ackites KillWxapkg Zip Bomb Resource Exhaustion in github.com/Ackites/KillWxapkg...
CVE-2025-5108
CVE-2025-5108 affects zongzhige ShopXO 6.5.0. The issue is in the Upload function of app/admin/controller/Payment.php (ZIP File Handler); manipulation of the params argument enables unrestricted file upload. Exploitation is possible remotely with no user interaction, and multiple sources note pub...