999 matches found
CVE-2026-97968
A flaw was found in the Linux kernel's Corsair Commander Pro corsair-cpro hardware monitoring driver. When device registration fails during initialization, debugfs entries are left registered after the associated device data structure has been freed. A local user with access to the debugfs...
CVE-2026-97967
A flaw was found in the Linux kernel's Corsair Commander Pro corsair-cpro driver. When device initialization fails, the driver does not remove registered debug filesystem debugfs entries, leaving behind references to memory that has already been freed. A local user accessing these lingering entri...
Commander
Commander Commander is a command and control framework C2 written in Python, Flask and SQLite. It comes with two agents written in Python and C. Under Continuous Development Not script-kiddie friendly Features Fully encrypted communication TLS Multiple Agents Obfuscation Interactive Sessions...
Total-Commander-FTP-Password-Recovery-Tool-Python
Recuperación de contraseñas FTP de Total Commander Python Total Commander antes conocido como Windows Commander es un administrador de archivos clásico para Windows, Windows CE, Windows Phone y ahora también Android. Total Commander tiene un cliente FTP/FXP integrado y guarda los inicios de sesió...
Astra Linux – Vulnerability in mc
A issue was discovered in Midnight Commander through version 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user can connect to the server without being able to verify its authenticity...
CVE-2026-82460
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
EUVD-2026-68117
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82460
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in its REST file-operation and markdown endpoints, caused by improper path normalization validation. An unauthenticated, remote attacker can use path traversal sequences to read, write, move, or copy files outside the con...
PT-2026-83440
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82460: Improper Limitation of a Pathname to a Restricted Directory
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-76367
In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that user opens the note. The stored Cross-Site Scripting XSS vulnerability is possible because Splunk SOAR can treat...
CVE-2026-76367
In Splunk SOAR versions below 8.6.0, the Notes feature fails to sanitize content when a note's format changes, allowing an "Incident Commander" role user to store JavaScript that executes in another user's browser upon viewing. This stored XSS requires phishing the target to initiate a browser re...
CVE-2026-76367 Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that user opens the note. The stored Cross-Site Scripting XSS vulnerability is possible because Splunk SOAR can treat...
CVE-2026-76367 Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR
In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that user opens the note. The stored Cross-Site Scripting XSS vulnerability is possible because Splunk SOAR can treat...
PT-2026-78794
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A stored Cross-Site Scripting XSS issue exists where a user with the "Incident Commander" role can store JavaScript within a note. This occurs because the system may treat note content as Hyperte...
CVE-2026-76367: Improper Neutralization of Input During Web Page Generation
In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user when that user opens the note. The stored Cross-Site Scripting XSS vulnerability is possible because Splunk SOAR can treat...