Lucene search
+L

110 matches found

Kitploit
Kitploit
•added 2026/10/02 3:42 a.m.•12 views

stenographer

Stenographer 개요 Stenographer는 전체 패킷 캡처 유틸리티로, 침입 탐지 및 사고 대응 목적으로 디스크에 패킷을 버퍼링합니다. 고성능 NIC-디스크 패킷 쓰기 구현을 제공하며, 디스크가 가득 차면 해당 파일을 삭제하고, 특정 패킷 세트를 빠르고 쉽게 읽어올 수 있는 방법을 제공합니다. 다음과 같은 용도로 설계되었습니다: 디스크에 매우 빠르게 패킷 쓰기 멀티코어, 멀티디스크 시스템에서 10Gbps 가능한 많은 기록 저장 디스크 사용량 관리, 트래픽이 느릴 때 더 오래 저장, 디스크 한계에 도달하면 가장 오래된...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/02 3:42 a.m.•196 views

stenographer

Stenographer Overview Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection and incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files as disk fills up, and provides method...

6.2AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/27 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-77037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/15 12:59 a.m.•7 views

SUSE CVE-2026-88932

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

5.3CVSS5.8AI score0.00532EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/14 9:12 a.m.•12 views

CVE-2026-88932

A flaw was found in multer, a Node.js middleware for handling multipart/form-data uploads. When a request using disk storage is aborted during an upload, file writes that complete after multer's cleanup process are not removed. This can leave orphaned files on disk. A remote unauthenticated...

5.3CVSS5.8AI score0.00532EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•1 views

CVE-2026-88932: Uncontrolled Resource Consumption

multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk storage is aborted mid-upload, file writes that complete after multer has already run its abort cleanup are not removed, so each aborted upload can leave an orphaned...

5.3CVSS5.8AI score0.00532EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/08 9:29 p.m.•18 views

EUVD-2026-67928

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads...

7.5CVSS5.7AI score0.00347EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/28 10:16 p.m.•21 views

CVE-2026-77037

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer's disk storage engine removes the visible file but does not close the underlying write file descriptor, leaving a delete...

7.5CVSS0.00347EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/28 7:44 p.m.•43 views

CVE-2026-77037 multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer's disk storage engine removes the visible file but does not close the underlying write file descriptor, leaving a delete...

7.5CVSS0.00347EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/28 7:44 p.m.•64 views

CVE-2026-77037

multer is a Node.js middleware for handling multipart/form-data uploads. In version 2.2.0 , when a disk-backed upload is aborted or truncated before the write stream finishes, the disk storage engine removes the visible file but fails to close the underlying write file descriptor , leaving a dele...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•22 views

PT-2026-83356

Name of the Vulnerable Software and Affected Versions multer versions prior to 2.3.0 Description When using the disk storage engine for handling multipart/form-data, the software fails to close the underlying write file descriptor if an upload is aborted or truncated before the write stream...

7.5CVSS5.7AI score0.00347EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•3 views

CVE-2026-77037: Uncontrolled Resource Consumption

multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream finishes, multer's disk storage engine removes the visible file but does not close the underlying write file descriptor, leaving a delete...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/06 7:34 p.m.•21 views

CVE-2026-71434 Statamic: Missing file upload validation on frontend forms allows uploading disallowed file types

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.74.3 and 6.24.2, public frontend forms did not enforce the file upload restrictions that the Control Panel enforces, so an unauthenticated visitor could upload file types an administrator had intended to disallow...

5.3CVSS5.4AI score
SaveExploits0References7
NVD
NVD
•added 2026/07/24 3:17 p.m.•28 views

CVE-2026-16802

Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected...

6.5CVSS0.00103EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/22 10:25 p.m.•14 views

GHSA-W867-JM58-P9PV n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

Impact An authenticated user can repeatedly upload files to the data-table upload endpoint, bypassing the per-request quota check, which does not account for files already written to the shared temporary directory. This causes temporary files to accumulate on disk until the periodic cleanup runs,...

5.3CVSS5.3AI score0.00386EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2026/07/22 10:25 p.m.•18 views

NPM: n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

NPM: n8n: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads vulnerability discovered by ? in WordPress Npm n8n versions 1.123.58...

5.3CVSS5.2AI score0.00386EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
•added 2026/07/10 3:31 p.m.•18 views

Duplicate Advisory: Authenticated Users Can Exhaust Temporary Disk Storage via Data-Table File Uploads

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w867-jm58-p9pv. This link is maintained to preserve external references. Original Description n8n before 2.28.0 and before 1.123.58 on the 1.x branch contains a disk space exhaustion vulnerability in the...

5.3CVSS5.8AI score0.00386EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/22 3:21 p.m.•12 views

CVE-2026-12479 Path Traversal in keras-team/keras

A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the DiskIOStore.make method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths...

6.1CVSS6.5AI score0.00384EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/06/17 6:11 p.m.•31 views

Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

Impact A vulnerability in Multer allows an attacker to trigger a Denial of Service DoS by aborting or sending malformed multipart uploads, causing orphaned partial files to accumulate on disk when using diskStorage. Patches Users should upgrade to 2.2.0, 3.0.0-alpha.2 or higher Workarounds None...

7.5CVSS5.9AI score0.00488EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/06/17 6:11 p.m.•16 views

GHSA-3P4H-7M6X-2HCM Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads

Impact A vulnerability in Multer allows an attacker to trigger a Denial of Service DoS by aborting or sending malformed multipart uploads, causing orphaned partial files to accumulate on disk when using diskStorage. Patches Users should upgrade to 2.2.0, 3.0.0-alpha.2 or higher Workarounds None...

5.3CVSS5.9AI score0.00488EPSS
SaveExploits0References4
Rows per page
Query Builder