Lucene search
+L

16867 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/22 9:9 p.m.7 views

CVE-2026-41455

WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protocol restriction or destination validation. Attackers who can create or modify integrations can set webhook URLs to internal network...

8.5CVSS6AI score0.00236EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/22 9:9 p.m.20 views

CVE-2026-41455

CVE-2026-41455 affects WeKan

8.5CVSS6AI score0.00236EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/22 9:9 p.m.7 views

CVE-2026-41455 WeKan < 8.35 SSRF via Webhook URL

WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protocol restriction or destination validation. Attackers who can create or modify integrations can set webhook URLs to internal network...

6.3CVSS6.1AI score
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.18 views

uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-Check to Time-of-Use TOCTOU race condition exists in the mv utility of uutils coreutils during cross-device operations. The utility removes the destination path before recreating it through a copy operation. A local attacker with write access to the destination directory can exploit thi...

6.3CVSS5.5AI score0.00091EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/04/22 6:31 p.m.10 views

GHSA-M976-87WM-48FM uutils coreutils has a Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-Check to Time-of-Use TOCTOU race condition exists in the mv utility of uutils coreutils during cross-device operations. The utility removes the destination path before recreating it through a copy operation. A local attacker with write access to the destination directory can exploit thi...

6.3CVSS5.9AI score0.00091EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/04/22 5:43 p.m.28 views

External Control of File Name or Path

Overview i18next-fs-backend is an i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Affected versions of this package are vulnerable to External Control of File Name or Path that leads to raw interpolation of lng and ns value...

8.8CVSS5.9AI score0.00292EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/22 5:16 p.m.10 views

CVE-2026-35364

A Time-of-Check to Time-of-Use TOCTOU race condition exists in the mv utility of uutils coreutils during cross-device operations. The utility removes the destination path before recreating it through a copy operation. A local attacker with write access to the destination directory can exploit thi...

6.3CVSS0.00091EPSS
SaveExploits1References1
NVD
NVD
added 2026/04/22 4:16 p.m.10 views

CVE-2018-25267

UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attackers can craft a malicious filename string with 304 bytes of data followed by SEH record overwrite...

6.9CVSS0.00181EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/04/22 4:8 p.m.49 views

CVE-2026-35364 uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition

A Time-of-Check to Time-of-Use TOCTOU race condition exists in the mv utility of uutils coreutils during cross-device operations. The utility removes the destination path before recreating it through a copy operation. A local attacker with write access to the destination directory can exploit thi...

6.3CVSS0.00091EPSS
SaveExploits1References1
CVE
CVE
added 2026/04/22 4:8 p.m.49 views

CVE-2026-35364

The CVE-2026-35364 entry describes a TOCTOU race in the mv utility of the uutils coreutils project during cross-device operations. The vulnerability arises when mv removes the destination path and recreates it via a copy; a local attacker with write access to the destination directory can replace...

6.3CVSS5.9AI score0.00091EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/22 4:8 p.m.5 views

CVE-2026-35356 uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race

A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the install utility of uutils coreutils when using the -D flag. The command creates parent directories and subsequently performs a second path resolution to create the target file, neither of which is anchored to a directory file...

6.3CVSS5.9AI score0.00108EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/22 4:8 p.m.35 views

CVE-2026-35356 uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race

A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the install utility of uutils coreutils when using the -D flag. The command creates parent directories and subsequently performs a second path resolution to create the target file, neither of which is anchored to a directory file...

6.3CVSS0.00108EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/22 4:8 p.m.9 views

CVE-2026-35356 uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race

A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the install utility of uutils coreutils when using the -D flag. The command creates parent directories and subsequently performs a second path resolution to create the target file, neither of which is anchored to a directory file...

6.3CVSS6.1AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/22 4:8 p.m.35 views

CVE-2026-35355 uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race

The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition during file installation. The implementation unlinks an existing destination file and then recreates it using a path-based operation without the OEXCL flag. A local attacker can exploit t...

6.3CVSS0.00118EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/22 4:8 p.m.34 views

CVE-2026-35355

CVE-2026-35355 concerns the install utility in uutils coreutils . The vulnerability arises from a TOCTOU race during file installation: the code unlinks an existing destination file and then recreates it via a path-based operation without using the O_EXCL flag. This creates a window where a local...

6.3CVSS5.8AI score0.00118EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/04/22 4:8 p.m.10 views

CVE-2026-35355 uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race

The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition during file installation. The implementation unlinks an existing destination file and then recreates it using a path-based operation without the OEXCL flag. A local attacker can exploit t...

6.3CVSS6AI score
SaveExploits0References6
EUVD
EUVD
added 2026/04/22 3:31 p.m.12 views

EUVD-2026-24741

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all...

8.5CVSS5.9AI score0.00101EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/22 2:57 p.m.3 views

CVE-2018-25267

UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attackers can craft a malicious filename string with 304 bytes of data followed by SEH record overwrite...

6.9CVSS6AI score0.00181EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2026/04/22 2:16 p.m.10 views

CVE-2026-0539

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all...

8.5CVSS0.00101EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/22 1:2 p.m.7 views

CVE-2026-0539 Local Privilege Escalation in pcvisit service client

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all...

8.5CVSS5.9AI score0.00101EPSS
SaveExploits0References2
Rows per page
Query Builder