1688 matches found
slui-file-handler-hijack-privilege-escalation
Slui File Handler Hijack LPE Exploit Information| ---|--- Date| 15.01.2018 Patched| Windows 10 20H1 19041 exploit-db| 44830 Tested on| Windows 8-10, x86/x64 independent Description slui.exe is an auto-elevated binary that is vulnerable to file handler hijacking. Read access to...
PT-2026-146916
Name of the Vulnerable Software and Affected Versions Hotel Booking Lite versions prior to 2.5.2 Description An unrestricted upload of files with dangerous types exists in the theme file handler. This allows an attacker to upload a web shell—a malicious script that enables remote command...
CVE-2024-28247-Pi-hole-Arbitrary-File-Read
CVE-2024-28247 Pi-hole Arbitrary File Read Description This repository contains an exploit for CVE-2024-28247, a high vulnerability CVSS 7.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and track domains at the network level. The vulnerability arises from the...
github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...
EUVD-2026-119755
A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function uploaddocumentimage of the file application/controllers/FilesController.class.php of the component File Handler. The manipulation of the argument url results in server-side request...
CVE-2026-124500
A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function uploaddocumentimage of the file application/controllers/FilesController.class.php of the component File Handler. The manipulation of the argument url results in server-side request...
CVE-2026-124500: Fengoffice Feng Office: A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2
A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function uploaddocumentimage of the file application/controllers/FilesController.class.php of the component File Handler. The manipulation of the argument url results in server-side request...
CVE-2026-124500
A security flaw in Fengoffice Feng Office (up to versions 3.11.13.11/4.2.1.2) allows for server-side request forgery (SSRF) . The vulnerability exists within the File Handler component, specifically in the upload_document_image function of the application/controllers/FilesController.class.php fil...
CVE-2026-124500 Fengoffice Feng Office File FilesController.class.php upload_document_image server-side request forgery
A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function uploaddocumentimage of the file application/controllers/FilesController.class.php of the component File Handler. The manipulation of the argument url results in server-side request...
CVE-2026-124500 Fengoffice Feng Office File FilesController.class.php upload_document_image server-side request forgery
A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function uploaddocumentimage of the file application/controllers/FilesController.class.php of the component File Handler. The manipulation of the argument url results in server-side request...
PT-2026-140159
A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function upload document image of the file application/controllers/FilesController.class.php of the component File Handler. The manipulation of the argument url results in server-side request...
CVE-2026-122052
A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS File Handler. The manipulation leads to uncontrolled memory allocation. Remote exploitation of the attack is possible...
EUVD-2026-117879
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...
CVE-2026-123268
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...
DEBIAN-CVE-2026-123268
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...
Linux Distros Unpatched Vulnerability : CVE-2026-122052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS Fi...
CVE-2026-123268: libyal libvmdk: A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...
UBUNTU-CVE-2026-123268
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...
Linux Distros Unpatched Vulnerability : CVE-2026-123268
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function...
CVE-2026-123268 libyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption
A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdkextenttablegetextentdatafilepath of the file libvmdk/libvmdkextenttable.c of the component Extent Data File Handler. The manipulation leads to memory...