CVE-2025-54107: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

CVE-2024-6839: Improper Resolution of Path Equivalence

corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex...

CVE-2025-24470: Improper Resolution of Path Equivalence

An Improper Resolution of Path Equivalence vulnerability CWE-41 in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests...

CVE-2025-21269: Improper Resolution of Path Equivalence

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2025-21219: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21328: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21189: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21329: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2025-21268: Improper Resolution of Path Equivalence

MapUrlToZone Security Feature Bypass Vulnerability...

CVE-2024-30036: Improper Resolution of Path Equivalence

Windows Deployment Services Information Disclosure Vulnerability...

CVE-2023-36396: Improper Resolution of Path Equivalence

Windows Compressed Folder Remote Code Execution Vulnerability...

SUSE SLES15 / openSUSE 15 Security Update : cni-plugins (SUSE-SU-2022:4593-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4593-1 advisory. - CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration bsc1181961. Tenable has extracted the...

CVE-2022-0855: Improper Resolution of Path Equivalence

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...

Mageia: Security Advisory (MGASA-2021-0060)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA-2530-1] drupal7 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2530-1 [email protected] https://www.debian.org/lts/security/ Gunnar Wolf January 21, 2021 https://wiki.debian.org/LTS -...

TAS - A Tiny Framework For Easily Manipulate The Tty And Create Fake Binaries

A tiny framework for easily manipulate the tty and create fake binaries. How it works? The framework has three main functions, tasexecv, tasforkpty, and tasttyloop. tasexecv: It is a function similar to execv, but it doesn't re-execute the current binary, something very useful for creating fake...

CVE-2018-3734

stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path...