489805 matches found
CVE-2026-11319: Improper Limitation of a Pathname to a Restricted Directory
TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...
EUVD-2025-211132
A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...
CVE-2025-52290
A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows an attacker to cause a Denial of Service (DoS) . The vulnerability is triggered by processing a crafted media file , which leads to an unexpected application crash. No speci...
HPE Compute Scale-up Server 3200 platform input validation error vulnerability
A input validation error vulnerability exists in HPE Compute Scale-up Server 3200 versions prior to 1.77.30, HPE Compute Scale-up Server 3250 versions prior to 1.03.38, and HPE Superdome Flex server versions prior to 4.17.03. This vulnerability can be exploited remotely to list and modify the RMC...
CVE-2025-55667: Improper Restriction of Operations within the Bounds of a Memory Buffer
A segmentation violation in the dumpisomsaps function /mp4box/filedump.c of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55667
The GPAC MP4Box software (version v2.5-DEV-rev1672-gc9a31d0e1-master ) is vulnerable to a segmentation violation within the dump_isom_saps function located in /mp4box/filedump.c. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted MP4 file . The vulnerability ...
CVE-2026-91047: Missing Authorization
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
PT-2026-117426
VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi access point that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with num ep fine set to zero and an...
CVE-2026-79983: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel FTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the absolut...
PT-2026-117332
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.18.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description A path traversal issue exists in the Apache Camel Mina SFTP component. Remote-file consumers build absolute remote paths by concatenating a...
ROS-20261019-73-0037
The vulnerability of the go-git library is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created malicious .idx file...
PT-2026-117442
A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move uploaded file of the file home.php. The manipulation of the argument my img leads to unrestricted upload. Remote exploitation of the attack is...
Jenkins 2.426.2 LTS CLI Arbitrary File Read
Jenkins version 2.426.2 LTS contains an arbitrary file read vulnerability in CLI argument processing that can expose files readable by the Jenkins process. The supplied proof of concept retrieves CTF credentials through this issue. https://packetstorm.news/download/236352...
CVE-2025-60480
A heap buffer overflow in the gfodfac4cfgalternativeinfo function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
PT-2026-117236
The FormFlow for GoHighLevel GHL WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unauthenticated attackers to read its contents, which include connected-CRM identifiers and, on sites that have linked the...
CVE-2025-60480
A heap buffer overflow in the gfodfac4cfgalternativeinfo function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2026-107188: Unrestricted Upload of File with Dangerous Type
A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...
CVE-2025-60480
GPAC Project/MP4Box version 2.5-DEV-rev1593-gfe88c3545-master contains a heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function located in /odf/descriptors.c. An attacker can exploit this vulnerability by providing a crafted AC4 file to trigger a Denial of Service (DoS) . No specifi...
CVE-2026-111045: Improper Link Resolution Before File Access
CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path ...
CVE-2025-55667
A segmentation violation in the dumpisomsaps function /mp4box/filedump.c of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...