CVE-2026-30996

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...

EUVD-2026-22977

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...

CVE-2026-30996

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...

SoftSul SAC-NFe security vulnerabilities

SoftSul SAC-NFe is an electronic invoice management system developed by the Brazilian company SoftSul. Version 2.0.02 of SoftSul SAC-NFe contains a security vulnerability. This vulnerability stems from defects in the file processing logic of the download.php component, which may lead to directory...

CVE-2026-30996: Improper Limitation of a Pathname to a Restricted Directory

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...

CVE-2026-30996

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...

CVE-2026-30996

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...

CVE-2026-30996

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...

CVE-2026-30996

The SAC-NFe electronic invoice management system, developed by SoftSul , is vulnerable in version 2.0.02 . A defect in the file handling logic of the download.php component allows an attacker to perform a directory traversal attack. By sending a crafted GET request , an attacker can bypass direct...

Malware in nfe-kampanje-react

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nfe-kampanje-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7557c068ef9cbcbc173b77f996a4a18c8538c46fd2a50e2176a064b604d02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4837 Malicious code in nfe-kampanje-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7557c068ef9cbcbc173b77f996a4a18c8538c46fd2a50e2176a064b604d02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in nfe-splunk-analytics

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in nfe-splunk-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 333a63739ef36792f895d9c219edb642118e91dfc92c60b14a00365e79fd45f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

br.com.swconsultoria:java-cte (>=3.00.4, <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3, <=3.00.4) +1215 more potentially affected by CVE-2020-15522 via org.bouncycastle:bcprov-jdk16 (>=1.38, <=1.46)

org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1-alpha1, =2.1-alpha1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2020-15522 Source advisory: OSV:GHSA-6XX3-RG99-GC3P...

GitHub Security Lab: [Java] CWE-755: Query to detect Local Android DoS caused by NFE

This bug was reported directly to GitHub Security Lab...

Threat Outbreak Alert RuleID23033: Email Messages Distributing Malicious Software on May 22, 2016

Medium Alert ID: 46338 First Published: 2016 May 23 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23033 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID21278: Email Messages Distributing Malicious Software on February 23, 2016

Medium Alert ID: 43695 First Published: 2016 February 24 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21278 may contain the following files: Name |...