94 matches found
EUVD-2026-51718
The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...
CVE-2026-15244: Improper Limitation of a Pathname to a Restricted Directory
The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inclusion path, allowing users with the shop manager capability to cause the inclusion and execution of arbitrary local files, which is then triggered o...
CVE-2026-57916 Arbitrary Path Execution via CPS URI in proCertum SmartSign
proCertum SmartSign opens Certificate Practice Statement CPS URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the...
EUVD-2026-49142
proCertum SmartSign opens Certificate Practice Statement CPS URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the...
CVE-2026-57916
CVE-2026-57916 affects proCertum SmartSign. The flaw arises when SmartSign opens a Certificate Practice Statement (CPS) URI without validating its schema, enabling an attacker to craft a certificate with a CPS URI pointing to a local executable or any URL. When a victim signs a document with such...
CVE-2026-57916 Arbitrary Path Execution via CPS URI in proCertum SmartSign
proCertum SmartSign opens Certificate Practice Statement CPS URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the...
PT-2026-64888
proCertum SmartSign opens Certificate Practice Statement CPS URI without schema validation. An attacker can prepare arbitrary certificate with CPS URI pointing to a local executable file or any URL, sign a document with it, and send it to the victim. When the victim opens the document in the...
CVE-2026-48704: Improper Input Validation
Warp is an agentic development environment. From 0.2023.10.24.08.03.stable00 until 0.2026.05.06.15.42.stable01, Warp may open executable local files through the operating system default file handler. A malicious Markdown document or project can contain a local-file link that appears as normal...
CVE-2026-7466
AgentFlow contains an arbitrary code execution vulnerability: an attacker can supply a user-controlled pipeline_path to POST /api/runs or POST /api/runs/validate, causing the API to load and execute existing Python pipeline files on disk in the context of the user running AgentFlow. The underlyin...
EUVD-2014-8197
Malware in sbrugna...
EUVD-2009-4382
Malware in sbrugna...
EUVD-2010-2154
Malware in sbrugna...
EUVD-2008-2477
Malware in sbrugna...
EUVD-2008-2645
Malware in sbrugna...
EUVD-2007-4889
Malware in sbrugna...
EUVD-2010-1088
Malware in sbrugna...
EUVD-2009-3675
Malware in sbrugna...
EUVD-2009-2219
Malware in sbrugna...