CVE-2026-102155 Security Advisory 0190

An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...

CVE-2026-102157 Security Advisory 0190

An insecure direct object reference IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data...

EUVD-2026-93953

An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...

EUVD-2026-93954

An insecure direct object reference IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data...

CVE-2026-102155 Security Advisory 0190

An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...

CVE-2026-102157

An insecure direct object reference (IDOR) vulnerability exists in the CloudVision CUE file-serving interface . This flaw may allow an authenticated network user to access another user's transient data under specific attack conditions. No specific exploit details or remediation steps are provided...

CVE-2026-101155

An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack on the Software Management Studio Software Repository . By using specially crafted requests or file uploads, the attacker can read or write files on the platform filesystem beyond the intended ...

EUVD-2026-93951

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

CVE-2026-101155 Security Advisory 0189

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

EUVD-2026-93950

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-101154

An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack to read or write files on the platform filesystem beyond the intended scope. This vulnerability occurs through specially crafted requests and/or crafted file uploads to the Network Provisioning...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Works On VMware-VCSA-all-6.7.0-8217866、VMware-VIM-all-6.7.0-8217866 ✔ VMware-VCSA-all-6.5.0-16613358 ✔ For vCenter6.7 U2+ vCenter 6.7U2+ running website in memory,so this exp can't work for 6.7 u2+. Need test vCenter 6.5 LinuxVCSA/WindowWaiting For Test vCenter 6.7...

jadx-magic-strings

Plugin de Cadenas Mágicas para JADX Un plugin para JADX que extrae información de constantes de cadena string. Características El plugin extrae y analiza constantes de cadena del código descompilado para encontrar: 1. Referencias a Archivos Fuente : Detecta referencias a archivos fuente de...

CVE-2019-19654

CVE-2019-19654 Denegación de servicio en Chevereto - = 3.13.5 Core en la herramienta /dashboard/bulk. Un atacante con una cuenta de administrador puede insertar cualquier ruta. El importador masivo eliminará cualquier archivo y carpeta a la que tenga acceso. Básicamente, puedes hacer que el sitio...

CVE-2019-1315

Windows Error Reporting Manager 任意文件移动提权 详情：https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html 运行该脚本需要 NtApiDotNet 库，以及一个有效的 Report.wer 文件，两者都需要与 poc.ps1 脚本放在同一目录下。 要生成 WER 报告文件，你可以在 PowerShell 中运行 Environment::FailFast'Error' 命令，然后在...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic 未授权访问致任意文件上传/RCE漏洞 检查脚本...

IIS-ShortName-Scanner

IIS短文件名扫描器 - 2012-2023 & 仍然活跃 最新演讲： 超越Microsoft IIS短文件名泄露 最新博文： https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/ 我建议大家在尝试这个旧工具之前，先试试@bitquark用Go写的新工具：https://github.com/bitquark/shortscan...

CVE-2026-102413

The Elastic Defend component within Elastic Agent / Endpoint is vulnerable to a Denial of Service (DoS) due to an Uncaught Exception (CWE-248) . When processing a specially crafted file name on Windows hosts using specific system locales (such as Chinese, Japanese, or Korean ), an unhandled excep...

CVE-2026-102413 Uncaught Exception in Elastic Endpoint Leading to Denial of Service

Uncaught Exception CWE-248 in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations including Chinese, Japanese, and Korean locales on Windows, an unhandle...

EUVD-2026-93934

Uncaught Exception CWE-248 in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations including Chinese, Japanese, and Korean locales on Windows, an unhandle...