Lucene search
+L

256 matches found

RedhatCVE
RedhatCVE
•added 2026/07/28 6:12 a.m.•18 views

CVE-2026-53669

A flaw was found in React Router, a routing library for React applications. A remote attacker could exploit this vulnerability by crafting a malicious link that uses backslashes within the or useNavigate components. This could lead to an Open Redirect, allowing the attacker to redirect users to...

6.1CVSS6AI score0.00319EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/27 10:17 p.m.•26 views

CVE-2026-53669

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

6.1CVSS0.00319EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/27 10:11 p.m.•20 views

CVE-2026-53669

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

5.1CVSS5.7AI score0.00319EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/27 10:11 p.m.•141 views

CVE-2026-53669 React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

5.1CVSS5.7AI score0.00319EPSS
SaveExploits0References5
Mend
Mend
•added 2026/07/27 10:11 p.m.•13 views

CVE-2026-53669

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

6.1CVSS5.7AI score0.00319EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/07/27 10:11 p.m.•23 views

EUVD-2026-49635

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

5.1CVSS5.3AI score0.00492EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/07/27 10:11 p.m.•60 views

CVE-2026-53669 React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

5.1CVSS0.00319EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•7 views

CVE-2026-53669: URL Redirection to Untrusted Site

React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes in and useNavigate. This issue is a follow up to CVE-2025-68470 and has been fixed in version 7.18.0...

6.1CVSS5.7AI score0.00319EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/07/16 7:16 p.m.•20 views

DEBIAN-CVE-2026-46377

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the escape sequence handler in Tokenizer.parseCurRune in selector/lexer/tokenize.go increments past a trailing backslash in a quoted string such as "\ or '\ and then reads...

6.2CVSS8.3AI score0.00184EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/15 3:42 p.m.•20 views

CVE-2026-62843

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...

6.8CVSS8.4AI score0.00391EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/15 3:42 p.m.•20 views

CVE-2026-62843 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...

6.8CVSS8.3AI score0.00391EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/15 3:42 p.m.•66 views

CVE-2026-62843 File Browser: Archive builder turns backslash filenames into path traversal (zip-slip)

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...

6.8CVSS0.00391EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/13 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-57211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbitmgmtwmstatic can pa...

10CVSS5.7AI score0.00631EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/07/10 9:16 p.m.•29 views

CVE-2026-57211

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbitmgmtwmstatic can pass URL-encoded backslashes to erlprimloader:readfileinfo before path validation when multiple management extension plugins are enabled,...

10CVSS5.8AI score0.00631EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/07/10 8:16 p.m.•66 views

CVE-2026-57211 RabbitMQ: UNC SSRF affecting the management UI on Windows

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbitmgmtwmstatic can pass URL-encoded backslashes to erlprimloader:readfileinfo before path validation when multiple management extension plugins are enabled,...

6.5CVSS0.00631EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/07/10 8:16 p.m.•28 views

EUVD-2026-43016

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbitmgmtwmstatic can pass URL-encoded backslashes to erlprimloader:readfileinfo before path validation when multiple management extension plugins are enabled,...

6.5CVSS5.8AI score0.00631EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•37 views

PT-2026-57296

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 Description On Windows, the RabbitMQ management plugin static file handler rabbit mgmt wm static can pass URL-encoded backslashes to the erl prim loader:read file info function...

10CVSS5.7AI score0.00631EPSS
SaveExploits1References10
RedHat Linux
RedHat Linux
•added 2026/07/06 3:02 p.m.•18 views

rabbitmq: RabbitMQ: Information disclosure via path validation bypass in management plugin

A flaw was found in RabbitMQ. The RabbitMQ management plugin static file handler, rabbitmgmtwmstatic, on Windows can be exploited when multiple management extension plugins are enabled. An attacker can pass specially crafted URL-encoded backslashes, bypassing path validation. This can lead to...

10CVSS5.7AI score0.00631EPSS
SaveExploits1References9
RedHat Linux
RedHat Linux
•added 2026/07/06 3:02 p.m.•18 views

rabbitmq: RabbitMQ: Information disclosure via path validation bypass in management plugin

A flaw was found in RabbitMQ. The RabbitMQ management plugin static file handler, rabbitmgmtwmstatic, on Windows can be exploited when multiple management extension plugins are enabled. An attacker can pass specially crafted URL-encoded backslashes, bypassing path validation. This can lead to...

10CVSS5.7AI score0.00631EPSS
SaveExploits1References9
NVD
NVD
•added 2026/07/03 9:16 p.m.•23 views

CVE-2026-25779

Gitea versions up to and including 1.25.4 allow redirect bypasses through raw or percent-encoded backslashes in redirectto values...

6.1CVSS0.00344EPSS
SaveExploits0References5
Rows per page
Query Builder