3 matches found
EUVD-2026-65539
rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...
USN-8467-1: Perl vulnerabilities
It was discovered that Perl's Archive::Tar module incorrectly handled symlink and hardlink targets during extraction. An attacker could use this issue to read or overwrite arbitrary files outside the extraction directory. CVE-2026-42496 It was discovered that Perl had a heap buffer overflow when...
PT-2023-4593 · Cisco · Cisco Nexus 3000 Series Switches +3
Name of the Vulnerable Software and Affected Versions: Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode affected versions not specified Description: A vulnerability in the SFTP server implementation could allow an authenticated, remote attacker to download or...