141119 matches found
WordPress-Path-Traversal-CVE-2019-11447
Penetration Test Report WordPress Path Traversal - CVE-2019-11447 Document Information Item| Details ---|--- Document Title| Penetration Test Report - WordPress Path Traversal Client/Exam| HackTheBox Lab - CPTS Exercise 1 Date| August 22, 2026 Assessor| Fernando Viana Penetration Tester Assessmen...
CVE-2026-8069
من Named Pipe من Acer إلى NT AUTHORITY\SYSTEM: CVE-2026-8069 قامت Acer NitroSense وPredatorSense 3.x بتثبيت خدمة Windows تسمى PSSvc التي كشفت بروتوكول named-pipe مخصص للمستخدمين المحليين. قبل أحد أوامر البروتوكول مسارًا قابلًا للتنفيذ يتحكم فيه المتصل، ونسخ رمز winlogon.exe، وشغّل ذلك الملف القاب...
CVE-2026-105795
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...
Vulnerability-CVE-2025-64446-CVE-2025-58034
FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...
linux-kernel-codex-harness
Kernel Codex Harness 한국어 | English أداة بحث · الاستيراد الأصلي: 3 أبريل 2026 · مراجعة التوثيق: 11 يوليو 2026 الفلسفة الأساسية — الإشارة الخارجية دع الملاحظات القابلة لإعادة الإنتاج خارج استدلال النموذج توجّه الانتباه؛ ولا تخلط أبدًا بين الأولوية والإثبات. حالة المشروع. هذا المستودع هو إصدار مبكر ...
CVE-2026-105795 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...
CVE-2026-105795 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...
EUVD-2026-93424
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...
CVE-2026-105795 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath from an attacker-controlled or compromised OpenAPI description into a generated API plugin manifest without validating that the value is a safe...
DEBIAN-CVE-2026-105840
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...
AZL-106667 CVE-2026-105840 affecting package lrzsz 0.12.20-50
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...
CVE-2026-105840
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...
CVE-2026-43637-cornac
CVE-2026-43637: اجتياز المسار انزلاق TAR في Cornac عبر extractarchive الخطورة: عالية، CVSS 4.0 8.8 ، حرجة، CVSS 3.1 9.1 محددة من VulnCheck، الجهة المختصة بترقيم الثغرات CNA المتجه v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N المتجه v4.0:...
EUVD-2026-93392
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...
CVE-2026-105840 lrzsz before 0.13.0 Path Traversal via lrz Restricted Mode checkpath()
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...
CVE-2026-105840
The lrzsz utility, in versions before 0.13.0 , is vulnerable to a path traversal issue within the lrz receive utility's restricted mode. The root cause is located in src/lrz.c, where the checkpath() function fails to reject absolute pathnames unless the software is specifically built with --enabl...
CVE-2026-105840
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...
CVE-2026-105834
Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...
Mitigation-Apache-CVE-2021-41773-
शमन-CVE-2021-41773- Apache में पथ ट्रैवर्सल और फ़ाइल प्रकटीकरण भेद्यता CVE-2021-41773 को कम करने के लिए शेल स्क्रिप्ट स्थापना wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git उपयोग भेद्यता को कम करने का पूर्ण समाधान और सुझाया गया तरीका यह स्क्रिप्ट सिस्टम रिपॉजिटरी और अपाचे क...
EUVD-2026-93378
Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...