598 matches found
CVE-2026-23989 REVA Public Link Exploit
REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to...
CVE-2026-23989 REVA Public Link Exploit
REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the "archiver" service this can be leveraged to...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the GRPC authorization middleware. An attacker can access resources outside the intended scope by bypassing scope validation through the archiver service. Remediation Upgrade...
GHSA-9J2F-3RJ3-WGPG OpenCloud Reva has a Public Link Exploit
Impact A security issue was discovered in Reva based products that enables a malicious user to bypass the scope validation of a public link, allowing it to access resources outside the scope of a public link. Details Public link shares in OpenCloud are bound to a specific scope usually a file or...
OpenCloud Reva has a Public Link Exploit
Impact A security issue was discovered in Reva based products that enables a malicious user to bypass the scope validation of a public link, allowing it to access resources outside the scope of a public link. Details Public link shares in OpenCloud are bound to a specific scope usually a file or...
PT-2026-6645
Name of the Vulnerable Software and Affected Versions REVA versions prior to 2.40.3 REVA versions prior to 2.42.3 Description A flaw exists in the GRPC authorization middleware of the "Reva" component of OpenCloud. This allows a malicious user to bypass scope verification of a public link. By...
📄 Splunk Enterprise 9.1.5 / 9.2.2 Remote Code Execution
This Metasploit module exploits a remote code execution vulnerability in Splunk Enterprise splunkarchiver application. The flaw is rooted in the unsafe use of a Splunk lookup function. The affected versions include any release prior to 9.0.10, as well as versions 9.1.2 through 9.1.5 and 9.2.0...
CVE-2020-7506
A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure...
TencentOS Server 4: plexus-archiver (TSSA-2024:0842)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0842 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
EUVD-2001-0867
Malware in sbrugna...
EUVD-2006-1612
Malware in sbrugna...
EUVD-2015-0569
Malware in sbrugna...
EUVD-2015-0570
Malware in sbrugna...
EUVD-2006-2007
Malware in sbrugna...
EUVD-2007-3496
Malware in sbrugna...
EUVD-2010-5194
Malware in sbrugna...
EUVD-2007-3365
Malware in sbrugna...
EUVD-2021-15918
Malware in sbrugna...