Lucene search
+L

16987 matches found

CVE
CVE
added 2026/07/29 12:37 p.m.43 views

CVE-2026-65891

Affected software: Joomla Extension - joomlacontenteditor.net, Joomla Content Editor (JCE) prior to 2.20.2. Root cause: improper input validation in the file rename functionality, allowing an authenticated user with file-management permissions to rename files to invalid names, resulting in hidden...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/29 12:37 p.m.12 views

CVE-2026-65891

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...

6.5CVSS5.8AI score0.00254EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/29 12:37 p.m.10 views

CVE-2026-65891 Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.9.99.10

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...

5.8AI score0.00254EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/07/29 9:40 a.m.38 views

CVE-2026-56390 Arbitrary Output Location Change in GNU Bison

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

4.6CVSS0.00133EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2026/07/29 9:40 a.m.4 views

CVE-2026-56390

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

8.6CVSS5.7AI score0.00154EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/29 12:00 a.m.34 views

PT-2026-65851

A vulnerability in the zipx.Unzip extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalization Collision combined with symlink following behavior. APFS treats certain Unicode equivalent filenames as identical e.g.,...

6.5CVSS5.9AI score0.00465EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/29 12:00 a.m.14 views

PT-2026-65778

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

6.8CVSS5.9AI score0.00154EPSS
SaveExploits0References3
CERT
CERT
added 2026/07/29 12:00 a.m.8 views

Arbitrary File Overwrite in Develar app-builder (zipx.Unzip) via Symlink Following on macOS (APFS)

Overview A vulnerability in the zipx.Unzip extraction routine of Develar’s app-builder allows an attacker to overwrite arbitrary files on macOS using Apple File System APFS. The issue arises from a combination of Unicode normalization collisions and unsafe symlink-following behavior. APFS treats...

6.5CVSS6AI score0.00465EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/29 12:00 a.m.25 views

PT-2026-65790

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...

5.8AI score0.00254EPSS
SaveExploits1References2
NVD
NVD
added 2026/07/28 11:17 p.m.14 views

CVE-2026-64863

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issu...

9.1CVSS0.00356EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/28 10:03 p.m.13 views

GHSA-HQ33-8JGP-8QQ3 goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

Summary The WebDAV mode-flag guard added to fix GHSA-3whc-qvhv-xqjp still does not enforce --no-delete on the WebDAV MOVE verb. MOVE deletes the source file rename removes it from its original path, and with Overwrite: T it additionally performs an explicit RemoveAll on the destination. Under -w...

9.1CVSS5.9AI score0.00356EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/28 10:02 p.m.44 views

CVE-2026-64863 goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issu...

9.1CVSS0.00356EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/28 10:02 p.m.8 views

CVE-2026-64863 goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issu...

9.1CVSS5.8AI score
SaveExploits0References5
CVE
CVE
added 2026/07/28 10:02 p.m.49 views

CVE-2026-64863

Summary: CVE-2026-64863 affects goshs, a single-binary file server. Prior to version 2.1.4, the httpserver/server.go wdGuard treated WebDAV MOVE as a write operation without enforcing --no-delete, allowing WebDAV clients to delete or overwrite files by MOVE with Overwrite: T. This could enable un...

9.1CVSS5.9AI score0.00356EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/28 10:02 p.m.9 views

CVE-2026-64863 goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issu...

9.1CVSS5.9AI score0.00356EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/28 10:02 p.m.11 views

EUVD-2026-50081

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issu...

9.1CVSS5.9AI score0.00356EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/28 10:02 p.m.10 views

CVE-2026-64863

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issu...

9.1CVSS5.9AI score0.00356EPSS
SaveExploits0References4Affected Software1
SUSE Linux
SUSE Linux
added 2026/07/28 6:28 p.m.13 views

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: CVE-2026-61464: heap buffer overwrite when running an X11 import with a crafted window title bsc1271496. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

1.8CVSS6AI score0.00092EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/28 3:04 p.m.14 views

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

8.8CVSS7.9AI score0.00454EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/28 12:16 p.m.16 views

CVE-2026-15411

The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0. This is due to the plugin not properly verifying that a user is authorized to perfor...

5.3CVSS0.0026EPSS
SaveExploits0References6
Rows per page
Query Builder