Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

CVE-2026-79805

An authenticated path traversal vulnerability exists in ClearPass Policy Manager . Exploitation of this flaw could allow an authenticated attacker to read and modify certain files on the underlying operating system. No specific software versions, root causes, or remediation steps are provided in ...

CVE-2026-79805 Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system...

CVE-2022-30525_check

CVE-2022-30525check 描述： 该脚本用于检查运行固件版本5.00至5.21 Patch 1的Zyxel USG FLEX设备中是否存在操作系统命令注入漏洞CVE-2022-30525。该漏洞允许攻击者在易受攻击的设备上修改特定文件并执行操作系统命令。 使用说明： 确保系统已安装Python 3 下载脚本并保存到本地计算机 打开命令提示符或终端窗口，并导航到脚本保存的目录 使用以下命令运行脚本："python CVE-2022-30525.py -t TARGETURL" 将TARGETURL替换为您要检查的Zyxel USG FLEX设备的URL...

CVE-2016-5195

Descripción: dcow es un posible exploit de la vulnerabilidad CVE-2016-5195. Ejecutando el programa como usuario no privilegiado en un sistema vulnerable, modificará el archivo /etc/passwd, forzando la contraseña "dirtyCowFun" SHA-512, pero podría modificarse para estándares antiguos. En caso de...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V para PC permite a los atacantes lograr una ejecución remota parcial de código o modificar archivos en un PC, tal como se explotó en la naturaleza en enero de 2023. autenticación| complejidad| vector ---|---|--- no disponible| no disponible| no disponible...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912：Simple File List eeListSettings'AllowFrontManage' != 'YES' return; isadmin 函数在 AJAX 请求中返回 FALSE，导致在评估 AllowFrontManage 设置之前授权检查即提前短路。 3. Nonce 泄露 ：安全 nonce eeSFLActionNonce 通过 wpcreatenonce 生成，并暴露在前端 HTML 源代码中，允许攻击者在无需认证的情况下提取它。 影响评估 机密性影响：高 可通过文件列表读取文件内容 文件元数据（名称、大小、日期）被暴露...

CVE-2026-104853

A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory...

CVE-2022-0847

CVE-2022-0847 PoC Uso dirty-pipe CVE-2022-0847 USAGE: dirty-pipe --target --offset --data OPTIONS: -t, --target TargetFile -o, --offset Offset -d, --data Data -h, --help Print help information...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 La vulnerabilidad Dirty Pipe, también conocida como CVE-2022-0847, es una falla significativa dentro del kernel de Linux. Este repositorio proporciona una versión adaptada del código de exploit ampliamente utilizado para hacerlo más fácil de usar y modular. Se...

SparstanBoogie

SparstanBoogie se probó, según se informa, en iOS/iPadOS 15.2 - 16.7 RC 20H18 y 17.0; sin embargo, las pruebas se han realizado hasta 26.1 26.1. También se agradece cualquier prueba en dispositivos por encima o por debajo de lo informado, ya que podría volver a aparecer en dispositivos más nuevos...

CVE-2021-1675_CarbonBlack_HuntingQuery

Consulta de caza en CarbonBlack para CVE-2021-1675 PrintNightmare 1 Basado en la regla Sigma para detectar el código POC filemodname:c:\windows\system32\spool\drivers\x64\3\old\1\123 2 Basado en la regla Sigma para detectar el código POC...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acceso a través del archivo wfufiledownloader.php, WordPress File Upload Solution poc, se produce una vulnerabilidad en la solución, se puede acceder a archivos de forma arbitraria y manipularlos o modificarlos...

CVE-2025-43537

CVE-2025-43537 Apple 安全致谢 研究人员： Al Sadman Awal 已获得 Apple 产品安全团队对 CVE-2025-43537 负责任披露的正式致谢。 概述 CVE-2025-43537 是一项在独立安全研究中发现并负责任地向 Apple 披露的安全漏洞。 Apple 调查了该报告，实施了安全修复，分配了 CVE-2025-43537，并在其官方安全公告中公开致谢该贡献。 本仓库记录了与该漏洞相关的公开披露、厂商致谢和公告信息。 漏洞信息 字段| 值 ---|--- CVE ID| CVE-2025-43537 厂商| Apple 研究人员| Al...

CVE-2026-82824

Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...

CVE-2026-82824 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted

Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...

Rocky Linux 9 [CIQ] Security Update: perl-YAML-LibYAML / perl-YAML-LibYAML-debuginfo / etc (crlsa-2025_9330)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259330 advisory. yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: perl-YAML-LibYAML / perl-YAML-LibYAML-debuginfo / etc (crlsa-2025_9329)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259329 advisory. yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9.6 [TuxCare] Security Update: tar (ALMALINUX9.6:CLSA-2026:1787335320)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787335320 advisory. - A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write...

CVE-2026-76737

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...