141117 matches found
CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...
CVE-2026-79800
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager . A low-privileged authenticated remote attacker could exploit this flaw to achieve remote code execution with elevated privileges on the underlying operating system. No specific patch v...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-106186
Google Chrome on Windows versions prior to 155.0.8059.39 is affected by an uncontrolled search path element in the CredentialProvider component. This vulnerability (CWE-427) allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. While the Chromium s...
cve-2025-48384-poc
PoC لثغرة CVE-2025-48384 يُظهر هذا المفهوم الإثباتي PoC ثغرة سوء تحليل مسار CR في الوحدات الفرعية submodules في Git، الأمر الذي يؤدي إلى تنفيذ تعسفي للخطافات hooks أثناء git clone --recurse-submodules. ⚠️ تحذير هذا لأغراض تعليمية واختبارية فقط. لا تشغّله على أي بيئة إنتاج. 🧪 الاستخدام git clone...
Exploit for CVE-2026-21589
CVE-2026-21589 - Atlassian Data Center Una...
CVE-2026-31156
CVE-2026-31156 OpenPLC-v3 में एक पथ इंजेक्शन भेद्यता है, जो प्रोग्राम द्वारा कमांड लाइन से पास किए गए फ़ाइल पथ मापदंडों पर कोई वैधता जाँच न करने से उत्पन्न होती है। हमलावर दुर्भावनापूर्ण पथ बनाकर किसी भी पढ़ने योग्य फ़ाइल को पढ़ सकते हैं, जिससे सूचना लीक होने का जोखिम होता है। भेद्यता प्रकार अनुच...
CVE-2026-106103
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
EUVD-2026-93778
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2026-86360
Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2024-6648
CVE-2024-6648 قالب Nuclei لـ CVE-2024-6648، اجتياز المسار المطلق في إضافة Prestashop ApPage Builder. الاستخدام: nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml...
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-71168
Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...
EUVD-2026-93774
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...