14983 matches found
CVE-2026-30278
The FLY is FUN Aviation Navigation software (version v35.33 ) contains an arbitrary file overwrite vulnerability. This flaw exists within the file import process , where a lack of proper path limitation allows attackers to overwrite critical internal files. Successful exploitation can lead to arb...
CVE-2026-30281
An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
App Craze Voice Recorder has a security vulnerability
App Craze Voice Recorder is a mobile recording application developed by App Craze Company, which supports audio recording and management. Version 10.0 of App Craze Voice Recorder contains a security vulnerability. This vulnerability stems from an arbitrary file overwriting during the file import...
PT-2026-29323
Name of the Vulnerable Software and Affected Versions Zefiro Cloud version 32.0.2026011614 Description An arbitrary file overwrite issue exists in the file import process. This allows attackers to overwrite critical internal files, which can result in arbitrary code execution or the exposure of...
CVE-2026-30284
An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
PT-2026-29283
Name of the Vulnerable Software and Affected Versions DeftPDF Document Translator version 54.0 Description A flaw exists in DeftPDF Document Translator v54.0 that allows attackers to overwrite critical internal files through the file import process. This can lead to arbitrary code execution or...
DeftPDF Document Translator has security vulnerabilities
DeftPDF Document Translator is an online tool developed by DeftPDF in the United States, which supports multilingual document translation and format conversion. Version 54.0 of DeftPDF Document Translator contains a security vulnerability. This vulnerability stems from an issue where arbitrary...
CVE-2026-30290
An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30290: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-5203: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path traversal. It is possible to launch the...
Metabase Enterprise < 1.54.22 / 1.55.x < 1.55.22 / 1.56.x < 1.56.22 / 1.57.x < 1.57.16 / 1.58.x < 1.58.10 / 1.59.x < 1.59.4 RCE (GHSA-fppj-vcm3-w229)
The version of Metabase Enterprise installed on the remote host is prior to 1.54.22, 1.55.x prior to 1.55.22, 1.56.x prior to 1.56.22, 1.57.x prior to 1.57.16, 1.58.x prior to 1.58.10, or 1.59.x prior to 1.59.4. It is, therefore, affected by a remote code execution vulnerability: - Authenticated...
CVE-2026-30285
An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30286
An arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30276
DeftPDF Document Translator v54.0 is affected by an arbitrary file overwrite vulnerability. This flaw occurs during the file import process , where an attacker can overwrite critical internal files. The vulnerability is exploitable remotely and requires no authentication . Successful exploitation...
CVE-2026-30284
UXGROUP LLC Voice Recorder v10.0 is susceptible to an arbitrary file overwrite vulnerability during the file import process . An attacker can exploit this flaw to overwrite critical internal files, potentially leading to arbitrary code execution or information exposure . No exploit details or spe...
CVE-2026-30285
The blockchain platform Zora: Post, Trade, Earn Crypto version 2.60.0 contains an arbitrary file overwrite vulnerability. The root cause is an issue during the file import process , which allows attackers to overwrite critical internal files. This flaw can lead to arbitrary code execution or info...
CVE-2026-34881: Server-Side Request Forgery (SSRF)
OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery SSRF. By use of HTTP redirects, an authenticated user can bypass URL validation checks and redirect to internal services. Only glance image import functionality is affected. In particular, th...
CVE-2026-30281: External Control of File Name or Path
An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30276: External Control of File Name or Path
An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
CVE-2026-30278: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...