14 matches found
CVE-2026-30996
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...
EUVD-2026-22977
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...
CVE-2026-30996
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...
CVE-2026-30996
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...
SoftSul SAC-NFe 安全漏洞
SoftSul SAC-NFe is an electronic invoice management system developed by the Brazilian company SoftSul. Version 2.0.02 of SoftSul SAC-NFe contains a security vulnerability. This vulnerability stems from defects in the file processing logic of the download.php component, which may lead to directory...
CVE-2026-30996
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...
CVE-2026-30996
CVE-2026-30996 affects SAC-NFe v2.0.02; an issue in the file handling logic of the component download.php allows directory traversal to read arbitrary system files via a crafted GET request. CVSSv3.1 score is 7.5 (HIGH) with network attack vector and low complexity; no exploitation details or mit...
CVE-2026-30996
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request...
Malicious code in nfe-kampanje-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7557c068ef9cbcbc173b77f996a4a18c8538c46fd2a50e2176a064b604d02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4837 Malicious code in nfe-kampanje-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7557c068ef9cbcbc173b77f996a4a18c8538c46fd2a50e2176a064b604d02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nfe-splunk-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 333a63739ef36792f895d9c219edb642118e91dfc92c60b14a00365e79fd45f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GitHub Security Lab: [Java] CWE-755: Query to detect Local Android DoS caused by NFE
This bug was reported directly to GitHub Security Lab...
Threat Outbreak Alert RuleID23033: Email Messages Distributing Malicious Software on May 22, 2016
Medium Alert ID: 46338 First Published: 2016 May 23 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23033 may contain the following files: Name | Size...
Threat Outbreak Alert RuleID21278: Email Messages Distributing Malicious Software on February 23, 2016
Medium Alert ID: 43695 First Published: 2016 February 24 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21278 may contain the following files: Name |...