483772 matches found
CVE-2026-112282
VideoLAN libbluray versions through 1.5.1 are susceptible to an out-of-bounds read vulnerability within the clpi_access_point() function. An attacker can trigger a denial of service by crashing the application by providing a crafted .clpi file in the BDMV/CLIPINF directory. The vulnerability occu...
CVE-2026-111936
Sigma File Manager versions through 2.2.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The root cause is that the validate_remote_url() function in security.rs fails to validate resolved IP addresses during extension download commands. An attacker can exploit this by usin...
CVE-2026-111936 Sigma File Manager through 2.2.0 SSRF via Extension Download Commands
Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...
EUVD-2026-104315
Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...
CVE-2026-111936 Sigma File Manager through 2.2.0 SSRF via Extension Download Commands
Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...
EUVD-2026-104316
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...
CVE-2026-111935
The software NoteGen through version 0.38.3 is vulnerable to an external control of file path (CWE-73) during chat image analysis. The root cause is the use of unvalidated synced sourceUrl paths , which allows an attacker with write access to the victim's sync target to plant absolute paths or fi...
CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...
CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...
CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
CVE-2026-111925
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
CVE-2026-111925
Mopidy versions prior to 4.0.5 are vulnerable to a path traversal vulnerability in the File Backend library. The root cause is a missing containment check in the FileLibraryProvider.lookup() function. This flaw allows unauthenticated clients to access local files outside the designated file/media...
CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
EUVD-2026-104317
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
Exploit for CVE-2026-85250
CVE-2026-85250 — camel-xpath: XML external entity processing...
WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Peter Tang in WordPress Plugin WP Mailster versions = 1.9.1.0...
WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Nixxies in WordPress Plugin Mang Board WP versions = 2.4.4...
USN-8937-1 openssh, openssh-gssapi vulnerabilities
It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. CVE-2026-106552 It was discovered that OpenSSH's sshd...