Lucene search
+L

553 matches found

Positive Technologies
Positive Technologies
added 2026/05/14 12:00 a.m.35 views

PT-2026-41145

Name of the Vulnerable Software and Affected Versions Portainer Community Edition versions prior to 2.39.0 Description The backup restore feature accepts a .tar.gz archive and extracts it to a target directory on the server. The extraction function ExtractTarGz in api/archive/targz.go constructs...

5.5CVSS5.9AI score0.00606EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/05/12 7:38 p.m.15 views

CVE-2026-40251

A flaw was found in Incus, a system container and virtual machine manager. An authenticated user with access to the storage volume feature can exploit missing validation logic in the storage volume import process or an out-of-bounds panic vulnerability in the backup restore subsystem. By submitti...

7.1CVSS5.8AI score0.00408EPSS
SaveExploits1References2
PyPA
PyPA
added 2026/05/12 6:17 p.m.29 views

PYSEC-2026-30

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/05/12 6:17 p.m.22 views

PYSEC-2026-30

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/05/12 4:56 p.m.14 views

CVE-2026-43891

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/12 4:56 p.m.11 views

CVE-2026-43891 changedetection.io: Arbitrary Local File Read via crafted backup restore

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits1References1
OSV
OSV
added 2026/05/12 4:56 p.m.11 views

CVE-2026-43891 changedetection.io: Arbitrary Local File Read via crafted backup restore

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2026/05/12 4:56 p.m.42 views

CVE-2026-43891

Summary: CVE-2026-43891 and related advisories describe an arbitrary local file read in changedetection.io caused by trusting attacker-controlled history.txt entries restored via crafted backups. Prior to 0.55.1, history values containing path separators are treated as filesystem paths and can re...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/05/12 4:56 p.m.48 views

CVE-2026-43891 changedetection.io: Arbitrary Local File Read via crafted backup restore

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS0.00354EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2026/05/08 2:22 a.m.16 views

SUSE CVE-2026-40251

Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The backup restore subsystem contains an...

7.1CVSS5.8AI score0.00408EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/07 1:37 p.m.21 views

Security Bulletin: IBM App Connect Enterprise Certified Container backup and restore is vulnerable to authorization bypass (CVE-2026-33186)

Summary gRPC-Go is used by the IBM App Connect Enterprise Certified Container Velero image. IBM App Connect Enterprise Certified Container deployments that use Velero for backup and restore are vulnerable to authorization bypass. This bulletin provides patch information to address the reported...

9.1CVSS5.8AI score0.01557EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2026/05/07 4:16 a.m.21 views

CVE-2026-41202

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Backup::restore extracts user uploaded ZIP archives without validating entry names, allowing an authenticated backend user...

9.4CVSS0.00529EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/07 3:18 a.m.7 views

CVE-2026-41202

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Backup::restore extracts user uploaded ZIP archives without validating entry names, allowing an authenticated backend user...

9.4CVSS6.5AI score0.00529EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/05/07 3:18 a.m.21 views

EUVD-2026-28255

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Backup::restore extracts user uploaded ZIP archives without validating entry names, allowing an authenticated backend user...

9.4CVSS6.5AI score0.00529EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/07 3:18 a.m.11 views

CVE-2026-41202 ci4ms Backup::restore is vulnerable to Zip Slip leading to RCE

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Backup::restore extracts user uploaded ZIP archives without validating entry names, allowing an authenticated backend user...

9.4CVSS6.6AI score
SaveExploits0References4
CVE
CVE
added 2026/05/07 3:18 a.m.30 views

CVE-2026-41202

The CVE describes a Zip Slip/quasi-directory-traversal in ci4ms Backup::restore for ci4ms (CodeIgniter 4-based CMS skeleton). Before v0.31.5.0, restoring uploaded ZIP archives does not validate entry names, allowing an authenticated backend user with backup-create permission to write files outsid...

9.4CVSS6.5AI score0.00529EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/07 3:18 a.m.47 views

CVE-2026-41202 ci4ms Backup::restore is vulnerable to Zip Slip leading to RCE

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Backup::restore extracts user uploaded ZIP archives without validating entry names, allowing an authenticated backend user...

9.4CVSS0.00529EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/07 12:00 a.m.14 views

CI4MS 路径遍历漏洞

CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.5.0 contained a path traversal vulnerability. This vulnerability stemmed from the fact that the Backup::restore function extracted ZIP archives uploaded by users without verifying the names of th...

9.4CVSS6AI score0.00529EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/06 9:16 p.m.11 views

CVE-2026-40251

Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The backup restore subsystem contains an...

7.1CVSS0.00408EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 8:40 p.m.11 views

CVE-2026-40251

Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The backup restore subsystem contains an...

7.1CVSS5.8AI score0.00408EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder