Lucene search
+L

222 matches found

Kitploit
Kitploit
added 2026/09/05 8:59 a.m.8 views

CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC Flawfinder 2.0.19에서는 잠재적으로 악의적인 파일 이름을 파싱할 때 파일명 정화sanitization가 수행되지 않습니다. 알려진 영향받는 터미널은 libvte 기반이며, 아래 예시는 mate-terminal을 보여줍니다. 이 취약점은 5/17/26 기준으로 David Wheeler와 제가 Flawfinder 2.0.20에서 수정했습니다. 이 저장소에는 샘플 POC bash 스크립트와 취약점 작동 방식에 대한 몇 가지 정보가 포함되어 있습니다. 취약점 설명 샘플...

8.7CVSS5.9AI score0.00326EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 2:32 a.m.6 views

CVE-2026-35585-poc

CVE-2026-35585: Эксплойт PoC OS Command Injection в File Browser English version Обзор Этот репозиторий содержит Proof of Concept PoC для критической уязвимости OS Command Injection CVE-2026-35585 , обнаруженной в File Browser версии с 2.0.0 по 2.33.1. Уязвимость находится в функционале...

7.5CVSS8.1AI score0.01922EPSS
SaveExploits2References2
OSV
OSV
added 2026/09/04 2:32 p.m.2 views

CVE-2026-85684 marker through 2.0.0 Path Traversal via upload filename

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existin...

8.8CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
added 2026/09/04 2:32 p.m.4 views

EUVD-2026-71133

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existin...

9.1CVSS5.5AI score0.00657EPSS
SaveExploits0References4
Ubuntu
Ubuntu
added 2026/09/03 12:43 p.m.6 views

USN-8723-1: SPICE vdagent vulnerabilities

It was discovered that SPICE vdagent had an integer overflow in the buffer size calculation used when writing to the daemon socket. A malicious or compromised SPICE host could possibly use this issue to cause SPICE vdagent to crash, resulting in a denial of service. CVE-2026-57965 It was discover...

5.1CVSS5.9AI score0.00126EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 3:38 a.m.7 views

POC-CVE-2026-19679

CVE-2026-19679 — 업로드된 파일 이름의 불충분한 무해화 입력 검증 상태: CONFIRMED — 6.7.2-14.el9 랩에서 확인됨2026-08-20. tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml"이 포함된 POST /rest/auditFile 요청은 HTTP 200을 반환하고 AuditFile 1000002를 등록했습니다 — 셸 메타문자가 포함된 파일 이름이 검증을 통과하여 종단 간end-to-end 저장되었습니다. 6.9.0에서는 동일한 요청이...

8.8CVSS5.8AI score0.01068EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:13 a.m.6 views

CVE-2023-38831-POC

Описание Название : CVE-2023-38831 Оценка CVSS : 7.8 Затронутые версии : Winrar 6.23 CVE-2023-38831 — это уязвимость нулевого дня, затрагивающая все версии WinRAR до 6.23. Проблема заключается в обработке формата ZIP, что может позволить злоумышленникам использовать уязвимые архивы для...

7.8CVSS7AI score0.97894EPSS
SaveExploits49References1
NVD
NVD
added 2026/08/27 8:18 p.m.9 views

CVE-2026-81730

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global saveAttachment in htdocs/emailcollector/lib/emailcollector.lib.php builds $filepath = $path . $filename . '.' . $ext and hands it ...

8.8CVSS0.00376EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/25 5:16 p.m.6 views

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

7.8CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/08/24 10:58 a.m.9 views

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

8.1CVSS5.3AI score0.0032EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-65612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted...

5.1CVSS5.9AI score0.0033EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/19 2:35 p.m.41 views

CVE-2026-44829

Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier are vulnerable to a path traversal in zip entry names. The root cause is that filepath.Base on Linux does not treat backslashes as path separators, so Windows-style parent directory components (e.g., ..\..\Windows\System32...

8.8CVSS8.8AI score0.00372EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/19 2:17 p.m.11 views

CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.9AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 2:17 p.m.8 views

UBUNTU-CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.9AI score0.0033EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/19 1:21 p.m.8 views

CVE-2026-65612 Shell Command Injection in nnn

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.4AI score0.0033EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 1:21 p.m.8 views

EUVD-2026-62401

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.5AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/14 7:56 p.m.16 views

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

8.7CVSS6AI score
SaveExploits0References6
NVD
NVD
added 2026/08/14 6:17 p.m.14 views

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

8.8CVSS0.01068EPSS
SaveExploits2References1
EUVD
EUVD
added 2026/08/14 5:35 p.m.8 views

EUVD-2026-58741

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

8.7CVSS5.4AI score0.01068EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2026/08/14 5:35 p.m.13 views

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

5.3AI score0.01068EPSS
SaveExploits2References2
Rows per page
Query Builder