exploit-CVE-2016-8016-25

McAfee Virus Scan per Linux: molteplici vulnerabilità remote QUESTO EXPLOIT E TUTTO IL CODICE IN QUESTO REPO SONO STATI RIMOSSI PER EVITARE QUALSIASI PROBLEMA RELATIVO ALLA VIOLAZIONE DI QUALSIASI LICENZA MCAFEE McAfee VirusScan Enterprise for Linux è una soluzione antivirus aziendale di McAfee. ...

CVE-2022-47952

Descrizione suggerita lxc-user-nic in lxc fino alla versione 5.0.1 è installato con setuid root e può consentire agli utenti locali di dedurre se un file esiste, anche all'interno di un albero di directory protetto, perché "Failed to open" spesso indica che un file non esiste, mentre "does not...

CVE-2024-39719

Analisi della vulnerabilità di divulgazione dell'esistenza di file in Ollama CVE-2024-39719 中文 Panoramica della vulnerabilità CVE-2024-39719 è una vulnerabilità di divulgazione dell'esistenza di file che colpisce Ollama versioni 0.3.14 e precedenti. Questa vulnerabilità consente agli aggressori d...

PT-2026-106254

Name of the Vulnerable Software and Affected Versions Docling versions 2.107.0 through 2.120.2 Description In the ODF backend, the software improperly handles the xlink:href attribute of a draw:image element. When a referenced part is not found within the document archive, the image ref from odf...

CVE-2026-96282

The Flatpak software is vulnerable to a file existence oracle and path traversal via extension metadata. A malicious Flatpak extension can probe the host filesystem to identify existing files and directories at arbitrary paths, potentially disclosing host directory listings to sandboxed applicati...

CVE-2026-96282 Flatpak: flatpak: extension metadata path traversal file existence oracle

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be...

CVE-2026-96282 Flatpak: flatpak: extension metadata path traversal file existence oracle

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be...

CVE-2026-95701

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

CVE-2026-95703

In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...

CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...

CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...

EUVD-2026-84496

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

CVE-2026-95701

MISP contains a path traversal weakness in the __statisticsOrgs method of UsersController.php, where an attacker-influenced organization name is concatenated directly into a file-system path used by file_exists() to check for a logo image. An authenticated user with the ability to create or renam...

CVE-2026-95701 MISP Path Traversal via Organization Name in Org-Statistics Logo Check

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

CVE-2026-95698 MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...

EUVD-2026-84495

The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...

PT-2026-96771

In MISP, the OrganisationsController:: uploadLogo method processed a caller-supplied tmp name value with filesystem probes file exists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via is uploaded file. An authenticated site-admin use...

CVE-2026-95701: Improper Limitation of a Pathname to a Restricted Directory

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

CVE-2026-95698: Improper Limitation of a Pathname to a Restricted Directory

The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...

CVE-2026-95703: Exposure of Sensitive Information to an Unauthorized Actor

In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...