CVE-2025-30052

The rsyncd service of the CGM CLININET is susceptible to an authentication bypass via IP spoofing . The service incorrectly grants access based solely on the client's source IP address; consequently, an attacker capable of spoofing an authorized IP can bypass security controls to edit files on th...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the filename parameter passed to editfiles function via click.edit. This function invokes a subprocess with shell=True that can be injected into by including double-quoted strings in a malicious filename. An attack...

PT-2026-30930

OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permission enforcement, allowing attackers who can influence agent tool execution to read arbitrary local files outside the intended repository...

PT-2026-30905

Name of the Vulnerable Software and Affected Versions: File Browser versions prior to 2.63.1 Description: File Browser is a file managing interface. Prior to version 2.63.1, when an administrator revokes a user's Share and Download permissions, existing share links created by that user remain...

Malicious code in cici-tiwul11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3382af711322449ddef0f877710f5b87873d45791bd454b22ad52cfe8c7e65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Atlassian Jira security vulnerabilities

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira that originates in the Atlassian Jira server and data center that allows remot...

CVE-2020-15182

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

PT-2019-11256

Name of the Vulnerable Software and Affected Versions: Gitea versions 1.6.2 and earlier Description: The issue is related to Incorrect Access Control in the Delete/Edit file functionality, allowing an attacker to delete files outside the repository they have access to. This can be exploited by...

Responsive Filemanager Authentication Bypass Vulnerability

Responsive FileManager is an open source file manager written in PHP that supports uploading and managing videos, images and other files. An authentication bypass vulnerability exists in Responsive Filemanager version 9.8.1 that allows an attacker to access the file management interface, which...

Nextcloud Server Multiple Vulnerabilities - Linux

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...

CVE-2017-0883

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...

PT-2017-10684

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 9.0.55 Nextcloud Server versions prior to 10.0.2 Description A permission related issue within the OCS sharing API allows an authenticated adversary to reshare shared files with an increasing permission set...

PT-2016-7982

Уязвимость менеджера лицензий Sentinel License Manager связана с некорректным ограничением имени пути к каталогу «/ int /». Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, удалять или редактировать защищаемые файлы с использованием параметров «alpremove» и «check in fil...