Lucene search
+L

195395 matches found

Snyk
Snyk
added 2026/07/11 2:29 p.m.14 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack through the CopyDelegateFile path in the VIDEO/APNG delegate code. An attacker can write output to a disallowed path by supplying a delegate-driven image write that copies a generated file to a destination the policy shou...

5.3CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.7 views

Symlink Attack

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.3CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.10 views

Symlink Attack

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.3CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.9 views

Symlink Attack

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.9 views

Symlink Attack

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.3CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.9 views

Symlink Attack

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.11 views

Symlink Attack

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.9 views

Symlink Attack

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.7 views

Symlink Attack

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.9 views

Symlink Attack

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.3CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.7 views

Symlink Attack

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.10 views

Symlink Attack

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.3CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.9 views

Symlink Attack

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/11 2:29 p.m.7 views

Symlink Attack

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.3CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/11 12:0 a.m.28 views

PT-2026-57397

Name of the Vulnerable Software and Affected Versions Planyo Online Reservation System plugin for WordPress versions prior to 3.1 Description An unauthenticated Server-Side Request Forgery SSRF exists that leads to Local File Inclusion LFI. The ulap.php file functions as an AJAX proxy and is...

7.2CVSS6.1AI score0.0039EPSS
SaveExploits0References15
NVD
NVD
added 2026/07/10 10:16 p.m.18 views

CVE-2026-54736

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.14.1, Phalcon\Encryption\Crypt::decrypt compares the attacker-supplied HMAC tag against the freshly computed HMAC using PHP/Zephir identity comparison, which lowers to a byte-wise comparison that returns early on the first...

8.2CVSS0.00147EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/10 9:43 p.m.4 views

GHSA-G936-7JQJ-MWV8 TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation

Description A vulnerability was discovered in TSDProxy where it forwards its internal per-process authentication token to all proxied backend services. When identityHeaders is enabled the default, tsdproxy injects x-tsdproxy-auth-token into every upstream HTTP request alongside user identity...

9CVSS6.4AI score
SaveExploits0References2
OSV
OSV
added 2026/07/10 9:24 p.m.6 views

MAL-2026-10175 Malicious code in chai-as-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecfd3091225b3667317dd9da8fd56c4f5e7fc675e17d52cda601898b3a50ec2 The package presents itself as pino-style logging middleware but on require spawns a detached Node child that runs lib/initializeCaller.js. That scri...

6.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/10 9:4 p.m.38 views

CVE-2026-57584 Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MVC application built with a default router registers a built-in route whose compiled PCRE pattern contains the nested quantifier /., and the same construct is produced by the /:params placeholder and the CLI...

8.7CVSS0.00419EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/10 9:2 p.m.12 views

CVE-2026-54736 Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.14.1, Phalcon\Encryption\Crypt::decrypt compares the attacker-supplied HMAC tag against the freshly computed HMAC using PHP/Zephir identity comparison, which lowers to a byte-wise comparison that returns early on the first...

8.2CVSS6.1AI score
SaveExploits0References7
Rows per page
Query Builder