485405 matches found
CVE-2026-111406 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111406
The MapSVG WordPress plugin (versions
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400: Vulnerability Analysis, Patch Management, Cyber...
wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash
A flaw in Wireshark's C12.22 protocol dissector allows remote attackers to trigger a Denial of Service DoS. By sending a specially crafted network packet or capture file, an attacker can crash the application, disrupting network analysis capabilities...
mariadb: MariaDB: Unauthorized file access via CONNECT engine functions
A flaw was found in MariaDB. Certain file-access User-Defined Functions UDFs within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read...
CVE-2026-89286
The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...
CVE-2026-91047
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
CVE-2026-108120
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...
mariadb: MariaDB: Unauthorized file access via CONNECT engine functions
A flaw was found in MariaDB. Certain file-access User-Defined Functions UDFs within the CONNECT storage engine do not properly enforce user privileges or directory restrictions when handling file system paths. An authenticated, low-privileged database user can exploit this vulnerability to read...
CVE-2026-89286
The FormFlow for GoHighLevel (GHL) WordPress plugin (versions through 1.0.0 ) is vulnerable to unauthenticated sensitive data disclosure. The application fails to restrict access to a log file stored within a publicly accessible uploads directory . An attacker can read this file to obtain connect...
EUVD-2026-104086
The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...
CVE-2026-89286 FormFlow for GoHighLevel <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via Log File
The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...
CVE-2026-76739 HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification
A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem...
CVE-2026-76739 HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification
A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem...
CVE-2026-76739
A security vulnerability exists in HPE Compute Scale-up Server 3200 , 3250 , and Superdome Flex platforms. The flaw allows for remote RMC filesystem modification and information disclosure. Specifically, the Compute Scale-up Server 3200 is affected prior to version 1.77.30 , the Compute Scale-up ...
EUVD-2026-104070
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...
CVE-2026-108120
Koozali SME Server version 11.0rc1-215 is vulnerable to a path traversal vulnerability in its View Logs functionality. This flaw allows an unauthenticated attacker to access files outside the intended directory, potentially resulting in the exfiltration of sensitive system and application files ....
CVE-2026-108120 path traversal inKoozali - SME Server
Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...
Moderate: Red Hat Security Advisory: cockpit-files security update
An update for cockpit-files is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
Malicious code in fabtoolkit (PyPI)
Source: amazon-inspector e55333b9d934a04c029943e0e6fbf34fff7c1344e0d1964b6860bc02d322855d fabtoolkit executes a payload embedded as a CHILD string run via subprocess.runsys.executable,'-I','-c',CHILD,... that fetches a JSON config from https://transfer.archivete.am/H2Uxm/fabdeploycheck-config.jso...