2762 matches found
CVE-2023-24059
CVE-2023-24059 Grand Theft Auto V para PC permite a los atacantes lograr una ejecución remota parcial de código o modificar archivos en un PC, tal como se explotó en la naturaleza en enero de 2023. autenticación| complejidad| vector ---|---|--- no disponible| no disponible| no disponible...
Directus - Unauthenticated File Modification
Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...
CVE-2024-9047
CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acceso a través del archivo wfufiledownloader.php, WordPress File Upload Solution poc, se produce una vulnerabilidad en la solución, se puede acceder a archivos de forma arbitraria y manipularlos o modificarlos...
CVE-2016-5195
Descripción: dcow es un posible exploit de la vulnerabilidad CVE-2016-5195. Ejecutando el programa como usuario no privilegiado en un sistema vulnerable, modificará el archivo /etc/passwd, forzando la contraseña "dirtyCowFun" SHA-512, pero podría modificarse para estándares antiguos. En caso de...
CVE-2022-30525_check
CVE-2022-30525check Descripción: Este script verifica la presencia de la vulnerabilidad de inyección de comandos del sistema operativo CVE-2022-30525 en dispositivos Zyxel USG FLEX que ejecutan versiones de firmware 5.00 a 5.21 Parche 1. La vulnerabilidad permite a un atacante modificar archivos...
DirtyPipe
Dirty Pipe Exploit: CVE-2022-0847 La vulnerabilidad Dirty Pipe, también conocida como CVE-2022-0847, es una falla significativa dentro del kernel de Linux. Este repositorio proporciona una versión adaptada del código de exploit ampliamente utilizado para hacerlo más fácil de usar y modular. Se...
CVE-2026-65348
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...
CVE-2026-43785
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read...
CVE-2026-43785
CVE-2026-43785 is a permissions issue affecting multiple Apple platforms: iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 . An app may be able to modify a file it only had permission to read , meaning a sandboxed app could exceed its intende...
CVE-2026-84609
CVE-2026-84609 is a permissions issue in Apple platforms addressed through improved path validation, allowing an app to modify protected system files . It affects iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 , all of which con...
CVE-2026-65348
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...
CVE-2026-65348
CVE-2026-65348 is a permissions issue in Apple iOS, iPadOS, and macOS , fixed with additional restrictions that prevent an app from modifying protected parts of the file system. The vulnerability is scored CVSS 5.5 (MEDIUM) with a local attack vector requiring user interaction and no prior privil...
rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
A path traversal and symlink vulnerability in rsync allows a malicious sender with write access to write files outside the intended directory. By exploiting symbolic links in conjunction with the --partial-dir or --backup-dir options, an attacker can bypass path restrictions to modify arbitrary...
CVE-2026-82049
In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...
CVE-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink
In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...
CVE-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink
In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...
CVE-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink
In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...
By-Poloss..-..CVE-2026-11912
CVE-2026-11912: Simple File List = 6.3.7 - Falta de autorización para modificación de archivos no autenticada Resumen ejecutivo...
CVE-2026-82765
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...