18 matches found
Exploit for CVE-2024-21546
UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-215...
EUVD-2026-67225
Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...
CVE-2026-48062
CodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the extin upload validation rule in system/Validation/StrictRules/FileRules.php checked the MIME-derived guessed extension instead of the client-provided filename extension. As a result, an uploaded file named shell.php containing...
GHSA-2GR4-PPC7-7MHX CodeIgniter4 has a validation bypass when uploading file extensions via `ext_in` rule
Impact The extin upload validation rule checked the MIME-derived guessed extension instead of the client-provided filename extension. As a result, an uploaded file named shell.php containing GIF-like content could pass validation such as:...
CVE-2026-2408
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408 Use-after-free in Cloud Workloads
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408 Use-after-free in Cloud Workloads
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
CVE-2026-2408
Technical details for CVE-2026-2408 are not publicly provided in the supplied documents. The entries only state a use-after-free vulnerability in the Cloud Workloads Enforce client extension. Monitor for updates from vendors and CVE feeds.
PT-2026-20956
Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...
EUVD-2019-6216
Malware in sbrugna...
Multiple vulnerabilities in Firebird client extension
...
BIT-LIBPHP-2021-21704 Multiple vulnerabilities in Firebird client extension
In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...
CVE-2021-21704 Multiple vulnerabilities in Firebird client extension
In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using Firebird PDO driver extension, a malicious database server could cause crashes in various database functions, such as getAttribute, execute, fetch and others by returning invalid response data that is not...