645 matches found
Race Condition Enabling Link Following
Overview Affected versions of this package are vulnerable to Race Condition Enabling Link Following in the handling of procfs file writes. An attacker can cause arbitrary writes to sensitive files or trigger a denial of service by redirecting write operations through race conditions and...
EUVD-2025-34927
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this issue is the function Download of the file /DeviceFileReport.do?Action=Download. Performing manipulation of the argument FilePath results in path traversal. The attack may be initiated remotely. The...
CVE-2025-11914 Shenzhen Ruiming Technology Streamax Crocus DeviceFileReport.do download path traversal
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this issue is the function Download of the file /DeviceFileReport.do?Action=Download. Performing manipulation of the argument FilePath results in path traversal. The attack may be initiated remotely. The...
Streamax Crocus 路径遍历漏洞
Streamax Crocus is a system used by China Ruiming Streamax to reduce commercial vehicles to reduce traffic accidents and cargo loss. A path traversal vulnerability exists in Streamax Crocus version 1.3.40, which stems from incorrect manipulation of the parameter FilePath in the file...
PT-2025-42652
Name of the Vulnerable Software and Affected Versions Shenzhen Ruiming Technology Streamax Crocus version 1.3.40 Description A path traversal issue exists in the Download function of the /DeviceFileReport.do?Action=Download file. Manipulation of the FilePath argument can lead to unauthorized...
CVE-2025-11914: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.40. Affected by this issue is the function Download of the file /DeviceFileReport.do?Action=Download. Performing manipulation of the argument FilePath results in path traversal. The attack may be initiated remotely. The...
EUVD-2025-33321
Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...
CVE-2025-11539: Improper Control of Generation of Code
Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...
Arbitrary Code Execution in Grafana Image Renderer Plugin
Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then load...
EUVD-2002-0767
Malware in sbrugna...
EUVD-2002-0463
Malware in sbrugna...
EUVD-2004-1214
Malware in sbrugna...
EUVD-2021-2294
Malware in sbrugna...
EUVD-2021-2295
Malware in sbrugna...
EUVD-2021-2313
Malware in sbrugna...
EUVD-2021-2386
Malware in sbrugna...
EUVD-2020-19248
Malware in sbrugna...
EUVD-2006-4250
Malware in sbrugna...
Unity Linux 20.1070e Security Update: redis (UTSA-2025-906166)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-906166 advisory. Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in...