Lucene search
K

13 matches found

Positive Technologies
Positive Technologies
added 2026/01/30 12:0 a.m.2 views

PT-2026-5439

Name of the Vulnerable Software and Affected Versions LobeHub versions prior to 1.143.3 Description LobeHub is an open source human-and-AI-agent network. The file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and...

7.2CVSS5.9AI score0.00042EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/10/13 9:37 p.m.7 views

CVE-2025-62363 yt-grabber-tui allows arbitrary code execution via configurable yt-dlp path

yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...

7.8CVSS0.00032EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/17 10:48 a.m.5 views

CVE-2025-10441

A vulnerability was found in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub433F7C of the file versionupgrade.asp of the component jhttpd. The manipulation of the argument path results in os command injection. The attack may be launched...

6.5CVSS6.8AI score0.00349EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-1735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destinati...

4.6CVSS6.7AI score0.00138EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/05 9:16 p.m.8 views

CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

8.8CVSS6.9AI score0.00656EPSS
Exploits0References1
OSV
OSV
added 2022/07/19 3:15 p.m.0 views

CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

8.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/19 3:15 p.m.1 views

CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

8.8CVSS7.3AI score0.00656EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/07/19 2:7 p.m.12 views

CVE-2022-2192

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...

7.5CVSS8.8AI score0.00656EPSS
Exploits0References1
CVE
CVE
added 2022/07/19 2:7 p.m.50 views

CVE-2022-2192

CVE-2022-2192 describes a forced browsing vulnerability in HYPR Server spanning versions 6.10 to 6.15.1. An attacker with a valid one-time recovery token can perform path tampering on the Magic Link page to elevate privileges, yielding a remote, network-attack surface with high impact to confiden...

8.8CVSS8.5AI score0.00656EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/12/09 7:15 p.m.1 views

DEBIAN-CVE-2020-26257

Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix. A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a /sendjoin, /sendleave, /invit...

6.5CVSS7AI score0.0045EPSS
Exploits0References1
OSV
OSV
added 2020/05/14 9:15 p.m.1 views

CVE-2020-10616

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple imported .dll files. Therefore, an attacker can replace them and execute code whenever the service starts...

8.8CVSS7.4AI score0.00473EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2016/02/12 12:0 a.m.31 views

SIMOGEO FileManager 2.3.0 File Upload

Exploit Title: SIMOGEO FileManager 2.3.0 - File Upload Vulnerability Date: 2015-12-09 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: https://github.com/simogeo/Filemanager Software Link: git clone http://github.com/simogeo/Filemanager.git Version: 2.3.0 Test...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2015/12/08 12:0 a.m.40 views

SIMOGEO FileManager 2.3.0 - Multiple Vulnerabilities

Exploit Title: SIMOGEO FileManager 2.3.0 - Path Traversal Vulnerability Date: 2015-12-09 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: https://github.com/simogeo/Filemanager Software Link: git clone http://github.com/simogeo/Filemanager.git Version: 2.3.0...

7.4AI score
Exploits0
Rows per page
Query Builder