20 matches found
EUVD-2026-42823
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...
CVE-2026-21053
CVE-2026-21053 describes an inability to properly validate input in Samsung Email before 6.2.13.1, allowing local attackers to create arbitrary files inside the app sandbox. Affected product/version: Samsung Email prior to 6.2.13.1. Root cause: improper input validation in the application. Impact...
CVE-2026-48720
Warp is an agentic development environment. From 0.2025.03.05.08.02.stable00 until 0.2026.05.06.15.42.stable01, Warp accepts non-inline OSC 1337;File payloads from terminal output and materialize the decoded payload as a local file without an additional confirmation step. This vulnerability is...
CVE-2026-48720 Warp: SSH remote output can lead to local file overwrite and persistence
Warp is an agentic development environment. From 0.2025.03.05.08.02.stable00 until 0.2026.05.06.15.42.stable01, Warp accepts non-inline OSC 1337;File payloads from terminal output and materialize the decoded payload as a local file without an additional confirmation step. This vulnerability is...
EUVD-2026-39017
Warp is an agentic development environment. From 0.2025.03.05.08.02.stable00 until 0.2026.05.06.15.42.stable01, Warp accepts non-inline OSC 1337;File payloads from terminal output and materialize the decoded payload as a local file without an additional confirmation step. This vulnerability is...
CVE-2026-48720: Improper Input Validation
Warp is an agentic development environment. From 0.2025.03.05.08.02.stable00 until 0.2026.05.06.15.42.stable01, Warp accepts non-inline OSC 1337;File payloads from terminal output and materialize the decoded payload as a local file without an additional confirmation step. This vulnerability is...
EUVD-2005-0156
Malware in sbrugna...
HPESBST04846 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS), Local Arbitrary File Creation and Code Execution Vulnerability
Potential Security Impact: Local: Arbitrary Code Execution, Unauthorized Arbitrary File Creation SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Brocade Fabric OS - Prior to v9.1.1d7 and v9.2.0 - v9.1.0 through 9.1.1d6 are affected CVSS Scores: | CVE | CVSS Vector | Base Score...
Exploit for Link Following in Rarlab Unrar
CVE-2022-30333-POC Sample file to test CVE-2022-30333 -...
CVE-2021-42767
A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1...
The vulnerability of the ThinPro Linux operating system, related to insecure privilege management, allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability of the ThinPro Linux operating system is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges by creating a file in the local file system, which turns the device into an administrative...
HP ThinPro Linux Elevation of Privilege Vulnerability
HP ThinPro Linux is an operating system for HP thin clients from Hewlett-Packard HP in the United States. A security vulnerability exists in HP ThinPro Linux. An attacker could exploit the vulnerability to obtain elevated privileges, create files on the local file system, and then execute command...
FTPShell Client 5.24 本地文件创建功能缓冲区溢出漏洞
No description provided by source...
DEBIAN-CVE-2014-2583
Multiple directory traversal vulnerabilities in pamtimestamp.c in the pamtimestamp module for Linux-PAM aka pam 1.1.8 allow local users to create arbitrary files or possibly bypass authentication via a .. dot dot in the 1 PAMRUSER value to the getruser function or 2 PAMTTY value to the checktty...
MP3 Digitalbox 2.7.2.0 Stack Overflow
!/usr/bin/perl Mp3 Digitalbox 2.7.2.0 .mp3 Local Stack Overflow POC Author : v3n0m Site : http://yogyacarderlink.web.id/ Group : YOGYACARDERLINK Date : July, 02-2010 INDONESIA Software : Mp3 Digitalbox Version : 2.7.2.0 Other versions may also be affected Download : http://www.tsoft.aplus.pl/...
dTunes 2.72 (Filename Processing) Local Format String PoC
Exploit for unknown platform in category dos / poc ========================================================= dTunes 2.72 Filename Processing Local Format String PoC ========================================================= !/usr/bin/perl dTunes 2.72 local format string PoC filename processing...
NOD32 Antivirus Restore To Feature Local File Creation
The installed version of NOD32 reportedly allows a local user to restore a malicious file from NOD32's quarantine to an arbitrary directory to which the user otherwise has only read access. A local user can exploit this issue to gain admin/system privilege on the affected host. C Tenable Network...
CVE-2005-1751
Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759...
