1915 matches found
LoLLMS WebUI - Subfolder Prediction via Path Traversal
A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...
stirling-storage-folder-idor
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · stirling-storage-folder-idor stirling-storage-folder-idor Stirling-PDF 3.2.0 - Stirling Tools Class: IDOR. Reach: Remote ROLEUSER. POST /api/v1/processing-folders has no @PreAuthorize beyond a logged-in user...
nccfsas
Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...
CVE-2026-21986-VirtualBox-DoS
CVE-2026-21986 - VirtualBox Shared Folders Kernel Memory Exhaustion DoS Overview This repository contains a proof of concept and technical write-up for CVE-2026-21986, a denial-of-service vulnerability in Oracle VM VirtualBox. The issue exists in the Shared Folders driver interface and allows...
EUVD-2026-106403
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...
CVE-2026-87362
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...
CVE-2026-87362
The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Folders, Files & Attachments component in version 9.3.6 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unau...
CVE-2026-113606
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...
EUVD-2026-105084
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...
CVE-2026-113606 Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...
CVE-2026-113606
Stirling-PDF versions 3.0.0 through 3.2.0 are vulnerable to an authorization bypass (CWE-639) within the processing folders functionality. Authenticated users can access files belonging to other users by pointing a processing folder at the server storage directory via a POST /api/v1/processing-fo...
CVE-2026-113606 Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders
Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...
PT-2026-118466
Name of the Vulnerable Software and Affected Versions Stirling-PDF versions 3.0.0 through 3.2.0 Description An authorization bypass allows authenticated users to access files stored by other users by directing a processing folder toward the server storage directory. An attacker can utilize the...
CVE-2026-112004
Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...
EUVD-2026-103457
Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...
CVE-2026-112004: Authorization Bypass Through User-Controlled Key
Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...
PT-2026-116608
Name of the Vulnerable Software and Affected Versions Teable versions prior to 2026-10-12T12-45-53Z.3331 Description An authorization bypass allows authenticated users to rename folders in bases to which they do not belong. This occurs because the PATCH '/api/base/:baseId/node/folder/:folderId'...
CVE-2026-70045
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally...
CVE-2026-70045
A Use after free vulnerability in Windows Work Folders allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high levels of confidentiality, integrity, and availability. An official fix is available, as indicated by the remediation level. No spe...
