65463 matches found
CVE-2026-44745 Open Redirect vulnerability in SAP Approuter
SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results...
EUVD-2026-43585
SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results...
EUVD-2026-43583
SAProuter on Microsoft Windows allows an unauthenticated attacker to load library DLL files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impac...
PT-2026-58909
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...
PT-2026-58417
Name of the Vulnerable Software and Affected Versions Microsoft PC Manager versions prior to 3.22.1.0 Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. Recommendations Update to version 3.22.1.0 via...
PT-2026-57958
A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...
PT-2026-58715
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This occurs when the system does not properly validate symbol...
PT-2026-58163
Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system...
PT-2026-58203
Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, allows attackers to execute arbitrary JavaScript code (XSS).
The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...
Security Update for Microsoft .NET Core SDK (July 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering...
PT-2026-58153
Name of the Vulnerable Software and Affected Versions Universal Plug and Play upnp.dll affected versions not specified Description Improper link resolution before file access, also known as link following, occurs in the upnp.dll component. This allows an authorized attacker to disclose informatio...
PT-2026-57980
Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 27.0.58.315 Bitdefender Internet Security versions prior to 27.0.58.315 Description An improper link resolution before file access, also known as link following, exists in the File Shredder module...
UBUNTU-CVE-2026-50526
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
CVE-2026-57215
creationtimestamp| type| source ---|---|--- 2026-07-13 23:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkubeyy5c22...
CVE-2026-62194
creationtimestamp| type| source ---|---|--- 2026-07-13 23:10:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkstf3jth2l 2026-07-15 11:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqomz5i76z22...
CVE-2026-62200
creationtimestamp| type| source ---|---|--- 2026-07-13 22:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqks6zjmmw2z 2026-07-15 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqojntm37626...
CVE-2026-62185
creationtimestamp| type| source ---|---|--- 2026-07-13 22:44:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrepm4uj2g...