436676 matches found
CVE-2026-11388
A Double Free vulnerability exists in the RTI Connext Professional (Core Libraries) , affecting versions 7.4.0 before 7.7.0.1 and 7.1.0 before 7.3.1.6 . This flaw allows for File Manipulation . The vulnerability is rated as MEDIUM severity with a CVSS 4.0 score of 6.9 , requiring LOCAL access and...
EUVD-2026-84610
Double Free vulnerability in RTI Connext Professional Core Libraries allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.1.0 before 7.3.1.6...
CVE-2026-8849 Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.
Use After Free vulnerability in RTI Connext Professional Security Plugins allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1...
EUVD-2026-84609
Use After Free vulnerability in RTI Connext Professional Security Plugins allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1...
CVE-2026-8849
A Use After Free vulnerability exists in RTI Connext Professional (Security Plugins) affecting versions from 7.6.0 before 7.7.0.1 . This flaw allows for File Manipulation on the target system. The vulnerability has a High base severity score of 7.7 .
CVE-2026-93378
A flaw was found in Google Chrome. A remote attacker who had compromised the renderer process could exploit missing authorization in the Storage component via a crafted PDF file. This could allow them to bypass site isolation, potentially leading to unauthorized access to data or further system...
CVE-2026-77270
The MCP Atlassian server (a Model Context Protocol server for Jira and Confluence) is vulnerable in versions prior to 0.22.0 . The jira_upload_attachment and confluence_upload_attachment tools fail to validate file_path values, treating caller-controlled inputs as trusted server-local paths. An a...
CVE-2026-77270 MCP Atlassian: Arbitrary File Read via Upload Attachment Tools
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled filepath values as trusted server-local paths. The server opens the selected file and uploads it to an Atlassia...
EUVD-2026-84605
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled filepath values as trusted server-local paths. The server opens the selected file and uploads it to an Atlassia...
CVE-2026-77270 MCP Atlassian: Arbitrary File Read via Upload Attachment Tools
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled filepath values as trusted server-local paths. The server opens the selected file and uploads it to an Atlassia...
CVE-2026-77270 MCP Atlassian: Arbitrary File Read via Upload Attachment Tools
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira and Confluence attachment upload tools treat caller-controlled filepath values as trusted server-local paths. The server opens the selected file and uploads it to an Atlassia...
WooRefer
WooRefer | CVE-2022-4047 - WooCommerce用リターン・返金・交換 CVE-2022-4047の脆弱性をチェック・悪用するための自動マスツール - WooCommerce用リターン・返金・交換 install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh...
EUVD-2026-84650
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, uploadattachment in src/mcpatlassian/confluence/attachments.py accepts a caller-controlled filepath and opens the selected server-local file without restricting it to the workspace. A...
CVE-2026-77258 MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, uploadattachment in src/mcpatlassian/confluence/attachments.py accepts a caller-controlled filepath and opens the selected server-local file without restricting it to the workspace. A...
CVE-2026-77258 MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, uploadattachment in src/mcpatlassian/confluence/attachments.py accepts a caller-controlled filepath and opens the selected server-local file without restricting it to the workspace. A...
CVE-2023-34598
CVE-2023-34598 - Gibbon v25.0.0 LFI エクスプロイト このリポジトリには、Gibbon v25.0.0 におけるローカルファイルインクルージョン LFI の脆弱性 CVE-2023-34598 を特定し悪用するための Python スクリプトが含まれています。このスクリプトは、ターゲットのウェブサイトをスキャンして脆弱性の有無を確認し、成功した場合には SQL ダンプをダウンロードしてさらなる分析に使用できます。また、脆弱性の可能性があるターゲットを見つけるのに役立つ組み込みの FOFA クエリも提供します。 概要 名前: CVE-2023-34598....
CVE-2023-43494
CVE-2023-43494 Jenkins 2.50 から 2.423 まで（両端を含む）、LTS 2.60.1 から 2.414.1 まで（両端を含む）ファイル読み取り 参照: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...
CVE-2017-8809_MediaWiki_RFD
CVE-2017-8809 - MediaWiki 用 RFDリフレクテッドファイルダウンロード リモートユーザーは対象サイト向けに特別に細工したURLを作成し、対象ユーザーがそれを読み込むと、'api.php'スクリプトがシェルコマンドを含むファイルをダウンロードさせます CVE-2017-8809。そのファイルは対象サイトによって提供されます。 環境 Google Chrome 79.0 MediaWiki 1.29.1 使用方法 1. 実行 root@kitploit: $ docker-compose up 2. トラップページにアクセス...
CVE-2022-3656
Imperva Red Teamは最近、Google ChromeおよびChromiumベースのブラウザの25億人以上のユーザーに影響を与える、CVE-2022-3656と呼ばれる脆弱性を公開しました。 この脆弱性により、暗号化ウォレットやクラウドプロバイダーの認証情報などの機密ファイルが窃取される可能性があります。 脆弱性の詳細: 1.https://bugs.chromium.org/p/chromium/issues/detail?id=1345275c34...