Lucene search
+L

17007 matches found

Cvelist
Cvelist
added 2025/12/04 12:00 a.m.35 views

CVE-2025-54307

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ endpoints allow low-privilege users to upload ZIP files to the server. The pluploadfileupload function handles these fil...

0.00742EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/04 12:00 a.m.17 views

PT-2025-49044

Name of the Vulnerable Software and Affected Versions Thermo Fisher Torrent Suite version 5.18.1 Description The Django application within Thermo Fisher Torrent Suite has a flaw related to file uploads. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ API...

8.8CVSS7.8AI score0.00742EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/12/04 12:00 a.m.15 views

EUVD-2025-201174

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ endpoints allow low-privilege users to upload ZIP files to the server. The pluploadfileupload function handles these fil...

7.8AI score0.00742EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/03 11:44 a.m.7 views

BIT-NGINX-GATEWAY-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS7.9AI score0.53461EPSS
SaveExploits10References15
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:00 a.m.6 views

Oracle Linux 9 : podman (ELSA-2025-20909)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20909 advisory. - fixes 'CVE-2025-9566 podman: Podman kube play command may overwrite host files rhel-9.7' Tenable has extracted the preceding description block...

8.1CVSS6.8AI score0.0108EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/12/02 12:38 a.m.17 views

Directory Traversal

Overview @fastify/reply-from is a forward your HTTP request to another server, for fastify Affected versions of this package are vulnerable to Directory Traversal via the reply.from function. An attacker can access unauthorized routes by crafting a malicious URL containing encoded directory...

6.9CVSS7.4AI score0.00175EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/01 6:59 p.m.11 views

EUVD-2025-200074

express improperly controls modification of query properties...

6.9CVSS6.3AI score0.00014EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/12/01 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-55174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the...

3.2CVSS6.1AI score0.00141EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/01 12:00 a.m.10 views

PUB-A-445162487

In tracepointmsghandler of cpm/google/lib/tracepoint/tracepointipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00093EPSS
SaveExploits0References1
Rockylinux
Rockylinux
added 2025/11/29 9:02 a.m.15 views

container-tools:rhel8 security update

An update is available for module.crun, fuse-overlayfs, module.slirp4netns, python-podman, module.runc, container-selinux, module.podman, module.udica, module.aardvark-dns, module.fuse-overlayfs, cockpit-podman, aardvark-dns, module.conmon, containers-common, libslirp, criu,...

8.1CVSS6.8AI score0.0108EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/28 8:50 a.m.20 views

CVE-2025-55174

A flaw was found in Skanpage. This vulnerability allows an attacker to partially overwrite files, resulting in a file containing new content followed by partial old content, due to incorrect use of QIODevice::ReadWrite instead of QODevice::WriteOnly...

3.2CVSS6.3AI score0.00141EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/11/27 12:58 a.m.17 views

CVE-2025-66262

Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive...

9.8CVSS7.4AI score0.01424EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
added 2025/11/27 12:00 a.m.19 views

Keyless Entry: Breaking and Entering EMMC RPMB with EMFI

The Replay Protected Memory Block RPMB in modern storage systems provides a secure area where data integrity is ensured by authentication. This block is used in digital devices to store pivotal information that must be safeguarded against modification by potential attackers. This paper targets th...

6.8AI score
SaveExploits0
NVD
NVD
added 2025/11/26 6:15 a.m.11 views

CVE-2025-55174

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly...

3.2CVSS0.00141EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/26 6:15 a.m.8 views

UBUNTU-CVE-2025-55174

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly...

3.2CVSS5.8AI score0.00141EPSS
SaveExploits0References6
NVD
NVD
added 2025/11/26 1:16 a.m.16 views

CVE-2025-66262

Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive...

9.8CVSS0.01424EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/11/26 12:50 a.m.22 views

CVE-2025-66262 Arbitrary File Overwrite via Tar Extraction Path Traversal

Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive...

9.3CVSS0.01424EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/11/26 12:50 a.m.5 views

CVE-2025-66262 Arbitrary File Overwrite via Tar Extraction Path Traversal

Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive...

9.3CVSS7AI score0.01424EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/26 12:50 a.m.7 views

EUVD-2025-199671

Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive...

9.3CVSS6.9AI score0.01424EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/26 12:50 a.m.27 views

CVE-2025-66262

CVE-2025-66262 affects DB Electronica Mozart FM Transmitter series (versions 30–7000). The root cause is tar extraction using -C / in restore_mozzi_memories.sh, which writes extracted files to the filesystem root without path validation. When combined with unauthenticated file upload vulnerabilit...

9.8CVSS7AI score0.01424EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder