58550 matches found
CVE-2026-57669
creationtimestamp| type| source ---|---|--- 2026-07-31 04:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrw5fetvn42q...
GHSA-52JP-GJ8W-J6XH
creationtimestamp| type| source ---|---|--- 2026-07-31 04:31:56+00:00| seen| https://gist.github.com/alon710/2fc91b89bbac8024e4e2b03ecca2ce62...
CVE-2026-51274
creationtimestamp| type| source ---|---|--- 2026-07-31 04:03:33+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrw34u4xo32i...
CVE-2026-51245
creationtimestamp| type| source ---|---|--- 2026-07-31 03:49:01+00:00| seen| https://gist.github.com/programmervuln/12500283acf6ad983a381750f485794a...
GHSA-H669-8M4G-R2HC
creationtimestamp| type| source ---|---|--- 2026-07-31 03:34:09+00:00| seen| https://gist.github.com/alon710/0adfedd2017833afe3a395108d8a9b0f...
CVE-2026-55495 Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the WOPI PUTRELATIVE handler passes X-WOPI-SuggestedTarget to URI.JoinRaw as a path rather than a filename, allowing slash and dot-dot segments to escape the source file directory and create or conditionally overwrite...
CVE-2026-55495 Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the WOPI PUTRELATIVE handler passes X-WOPI-SuggestedTarget to URI.JoinRaw as a path rather than a filename, allowing slash and dot-dot segments to escape the source file directory and create or conditionally overwrite...
CVE-2026-55495
Summary: Cloudreve up to v4.16.x is vulnerable to a path traversal via the WOPI PUT_RELATIVE handler. The WOPI header X-WOPI-SuggestedTarget is treated as a path and joined to the source directory using URI.JoinRaw, allowing slashes and dot-dot segments to escape the source file directory and cre...
GHSA-4JC5-G844-4X33
creationtimestamp| type| source ---|---|--- 2026-07-31 01:31:12+00:00| seen| https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b...
CVE-2026-66421
creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvk677xxf2y 2026-07-31 01:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqw2elck2a 2026-07-31 12:44:04+00:00| seen|...
CVE-2026-11536
creationtimestamp| type| source ---|---|--- 2026-07-30 22:16:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrvhpxhewy2y 2026-08-06 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgbdb2yns2v...
CVE-2026-68502
creationtimestamp| type| source ---|---|--- 2026-07-30 22:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgudm3vn23 2026-07-30 22:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvh244ih32q 2026-07-30 23:04:15+00:00| seen|...
CVE-2026-68500
creationtimestamp| type| source ---|---|--- 2026-07-30 22:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgu5cuil2l...
CVE-2026-67206
creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o 2026-08-02 08:02:13+00:00| seen| https://t.me/GithubRedTeam/96249 2026-08-03 02:07:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96...
CVE-2026-67594
Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers ca...
CVE-2026-67527
creationtimestamp| type| source ---|---|--- 2026-07-30 20:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dcic74hmkaf3g...
CVE-2026-67208
creationtimestamp| type| source ---|---|--- 2026-07-30 20:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvadilv6w2e 2026-07-31 12:38:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuttciu2q...
CVE-2026-67594
creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7x7eag22 2026-07-30 21:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdib25zu2j...
CVE-2026-12946
creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7vsnl622 2026-08-05 03:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mscly6623h2c...