3108 matches found
CVE-2023-24059
CVE-2023-24059 Grand Theft Auto V para PC permite a los atacantes lograr una ejecución remota parcial de código o modificar archivos en un PC, tal como se explotó en la naturaleza en enero de 2023. autenticación| complejidad| vector ---|---|--- no disponible| no disponible| no disponible...
Directus - Unauthenticated File Modification
Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...
CVE-2022-30525_check
CVE-2022-30525check Descripción: Este script verifica la presencia de la vulnerabilidad de inyección de comandos del sistema operativo CVE-2022-30525 en dispositivos Zyxel USG FLEX que ejecutan versiones de firmware 5.00 a 5.21 Parche 1. La vulnerabilidad permite a un atacante modificar archivos...
By-Poloss..-..CVE-2026-11912
CVE-2026-11912: Simple File List eeListSettings'Allow...
CVE-2016-5195
Descripción: dcow es un posible exploit de la vulnerabilidad CVE-2016-5195. Ejecutando el programa como usuario no privilegiado en un sistema vulnerable, modificará el archivo /etc/passwd, forzando la contraseña "dirtyCowFun" SHA-512, pero podría modificarse para estándares antiguos. En caso de...
CVE-2026-104853
A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory...
CVE-2022-0847
CVE-2022-0847 PoC Uso dirty-pipe CVE-2022-0847 USAGE: dirty-pipe --target --offset --data OPTIONS: -t, --target TargetFile -o, --offset Offset -d, --data Data -h, --help Print help information...
DirtyPipe
Dirty Pipe Exploit: CVE-2022-0847 La vulnerabilidad Dirty Pipe, también conocida como CVE-2022-0847, es una falla significativa dentro del kernel de Linux. Este repositorio proporciona una versión adaptada del código de exploit ampliamente utilizado para hacerlo más fácil de usar y modular. Se...
SparstanBoogie
SparstanBoogie's origins were tested reportedly on iOS/iPadOS 15.2 - 16.7 RC 20H18 and 17.0 however, tests have been conducted up to 26.1 26.1. Also any testing on devices above or under whats been reported is welcomed as it may come back in newer devices so theres no reason to shrug off any good...
CVE-2021-1675_CarbonBlack_HuntingQuery
Consulta de caza en CarbonBlack para CVE-2021-1675 PrintNightmare 1 Basado en la regla Sigma para detectar el código POC filemodname:c:\windows\system32\spool\drivers\x64\3\old\1\123 2 Basado en la regla Sigma para detectar el código POC...
CVE-2024-9047
CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acceso a través del archivo wfufiledownloader.php, WordPress File Upload Solution poc, se produce una vulnerabilidad en la solución, se puede acceder a archivos de forma arbitraria y manipularlos o modificarlos...
CVE-2025-43537
CVE-2025-43537 Crédito de Seguridad de Apple Investigador: Al Sadman Awal Oficialmente acreditado por Apple Product Security por la divulgación responsable de CVE-2025-43537. Resumen CVE-2025-43537 es una vulnerabilidad de seguridad identificada durante una investigación de seguridad independient...
CVE-2026-82824
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82824 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...
Rocky Linux 9 [CIQ] Security Update: perl-YAML-LibYAML / perl-YAML-LibYAML-debuginfo / etc (crlsa-2025_9330)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259330 advisory. yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 Tenable has extracted the preceding description block directly from the CIQ security...
Rocky Linux 8 [CIQ] Security Update: perl-YAML-LibYAML / perl-YAML-LibYAML-debuginfo / etc (crlsa-2025_9329)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259329 advisory. yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 Tenable has extracted the preceding description block directly from the CIQ security...
Rocky Linux 9.6 [TuxCare] Security Update: tar (ALMALINUX9.6:CLSA-2026:1787335320)
The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787335320 advisory. - A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write...
CVE-2026-76737
An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...
EUVD-2026-89356
An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of...
DEBIAN-CVE-2026-12345
The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...