484717 matches found
CVE-2026-111936 Sigma File Manager through 2.2.0 SSRF via Extension Download Commands
Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...
EUVD-2026-104315
Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validateremoteurl in security.rs never checks resolved IP addresses for extension download commands. A malicious extension or catalog entry can use hostnames resolving to loopback, private, or cloud...
CVE-2026-111935
The software NoteGen through version 0.38.3 is vulnerable to an external control of file path (CWE-73) during chat image analysis. The root cause is the use of unvalidated synced sourceUrl paths , which allows an attacker with write access to the victim's sync target to plant absolute paths or fi...
CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...
CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...
EUVD-2026-104316
NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...
CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
CVE-2026-111925
Mopidy versions prior to 4.0.5 are vulnerable to a path traversal vulnerability in the File Backend library. The root cause is a missing containment check in the FileLibraryProvider.lookup() function. This flaw allows unauthenticated clients to access local files outside the designated file/media...
CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
CVE-2026-111925 Mopidy before 4.0.5 Path Traversal via File Backend library.lookup
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
CVE-2026-111925
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
EUVD-2026-104317
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
Exploit for CVE-2026-85250
CVE-2026-85250 — camel-xpath: XML external entity processing...
WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Peter Tang in WordPress Plugin WP Mailster versions = 1.9.1.0...
WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Nixxies in WordPress Plugin Mang Board WP versions = 2.4.4...
USN-8937-1 openssh, openssh-gssapi vulnerabilities
It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. CVE-2026-106552 It was discovered that OpenSSH's sshd...
WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Peter Tang in WordPress Plugin weForms versions = 1.6.28...
EUVD-2026-104322
A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit h...
EUVD-2026-104325
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0...
CVE-2026-111829 WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0...