19287 matches found
The vulnerability of the f2fs_free_dic() function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the f2fsfreedic function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through the handling of temporary file creation and population in the sandboxed file system bridge. An attacker can write arbitrary data...
ROS-20260313-73-0009
A vulnerability in the nfsfsprocnetinit function of the NFS file system of the Linux operating system kernel is related to incorrect resource cleanup or release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Brokering File System BFS in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the NTFS file system in Windows operating systems relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the UNIX Disk Format File System Driver (UDFS) on Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the UNIX Disk Format File System Driver UDFS on Windows operating systems lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Resilient File System ReFS in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process...
TinaCMS CLI has Arbitrary File Read via Disabled Vite Filesystem Restriction
Summary The TinaCMS CLI dev server configures Vite with server.fs.strict: false, which disables Vite's built-in filesystem access restriction. This allows any unauthenticated attacker who can reach the dev server to read arbitrary files on the host system Details When running tinacms dev, the CLI...
CVE-2026-28792 Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS
Tina is a headless content management system. Prior to 2.1.8 , the TinaCMS CLI dev server combines a permissive CORS configuration Access-Control-Allow-Origin: with the path traversal vulnerability previously reported to enable a browser-based drive-by attack. A remote attacker can enumerate the...
CLSA-2026-1773311565 nfs-utils: Fix of CVE-2025-12801
CVE-2025-12801: fix rpc.mountd privilege escalation allowing NFSv3 clients to bypass rootsquash and allsquash when mounting subdirectories...
The vulnerability of the fs/hfsplus component in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the fs/hfsplus component in Linux operating systems relates to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Projected File System (ProjFS) file system in Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Projected File System ProjFS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
OpenClaw File Inclusion Vulnerability
OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from a file inclusion vulnerability. An attacker can exploit this vulnerability to read arbitrary files in the local file system...
CVE-2026-31988
yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate function. The while loop condition checks cursor data.length + 4 instead of cursor + 4 = data.length, allowing readUInt16LE to rea...
SUSE CVE-2025-12801
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...
GHSA-364Q-W7VH-VHPC OliveTin's unsafe parsing of UniqueTrackingId can be used to write files
When the saveLogs feature is enabled, OliveTin persists execution log entries to disk. The filename used for these log files is constructed in part from the user-supplied UniqueTrackingId field in the StartAction API request. This value is not validated or sanitized before being used in a file...
The vulnerability of the ntfs_rename() function in the fs/ntfs3/namei.c file of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ntfsrename function in the fs/ntfs3/namei.c file of the NTFS file system in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `btrfs_iget()` function in the `fs/btrfs/inode.c` module of the Btrfs file system in Linux kernels allows a attacker to cause a service failure.
The vulnerability of the btrfsiget function in the fs/btrfs/inode.c file of the Btrfs file system in Linux kernels involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...
