10 matches found
NotCVE-2026-0009
nitroshare のパストラバーサル脆弱性 説明 NitroShare Desktop v0.3.4 は、LAN ファイル転送サーバーにパストラバーサル脆弱性が存在します。サーバーは認証なしで全ネットワークインターフェース（ポート 40818）で待ち受けます。ファイルを受信する際、送信者の JSON アイテムヘッダーにある name フィールドは、解決されたパスが転送ルートディレクトリ C:\UserName\Downloads\NitroShare 内に留まるかどうかを検証せずに渡されます。同じ LAN...
NitroShare Desktop 0.3.4 Path Traversal
NitroShare Desktop version 0.3.4 contains a path traversal vulnerability in its LAN file transfer receive path. The transfer service is reachable from the local network on TCP port 40818 and processes incoming transfer metadata without authentication in the reported default configuration. A...
NotCVE-2026-0009 — Updated!
Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...
CVE-2026-66050
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
CVE-2026-66050
NitroShare Desktop 0.3.4 is affected by a path traversal flaw in the LAN file transfer server. An unauthenticated network attacker can craft a filename in the JSON item header name field to write arbitrary files outside the transfer root, including into the Windows Startup folder, enabling persis...
CVE-2026-66050 NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
CVE-2026-66050 NitroShare Desktop 0.3.4 Path Traversal via LAN File Transfer Server
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
CVE-2026-66050: Improper Limitation of a Pathname to a Restricted Directory
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...
PT-2026-64959
Name of the Vulnerable Software and Affected Versions NitroShare Desktop versions prior to 0.3.5 Description The LAN file transfer server contains a path traversal issue that allows unauthenticated attackers on the same network to write arbitrary files. This occurs because the server fails to...
