135417 matches found
spring-cloud-netflix-hystrix-dashboard-cve-2021-22053
CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Severity High Vendor Spring by VMware Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI...
[SECURITY] [DSA 6546-1] rails security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6546-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 06, 2026 https://www.debian.org/security/faq -...
CVE-2026-101153 Security Advisory 0188
On affected versions of CloudVision Portal on-premises or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor...
CVE-2026-101153
A path traversal vulnerability exists in CloudVision Portal (on-premises) and CloudVision Sensor . An authenticated user with high privileges could exploit this flaw to extract unintended data from the Sensor. The vulnerability is associated with CWE-22 (Improper Limitation of a Pathname to a Res...
EUVD-2026-93949
On affected versions of CloudVision Portal on-premises or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor...
CVE-2019-19654
CVE-2019-19654 Chevereto denial of service - = 3.13.5 Core in the /dashboard/bulk tool. An attacker with an admin account can insert any path. The bulk importer will remove any file and folder it has access to. Basically you can make the website self-destruct. Add job to "import" /var/www/html PO...
CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure
CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Advisory 06 - 25/02/05 Program: phpBB 2.0.12 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.12 & Lower versions Risk: Low Risk!! Impact: Full path disclosure -==phpBB 2.0.12 Full path disclosure==- Description phpB...
CVE-2026-102413
The Elastic Defend component within Elastic Agent / Endpoint is vulnerable to a Denial of Service (DoS) due to an Uncaught Exception (CWE-248) . When processing a specially crafted file name on Windows hosts using specific system locales (such as Chinese, Japanese, or Korean ), an unhandled excep...
CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation
🚨 CVE-2024-32019 - Netdata ndsudo PATH Vulnerability Exploit LPE to Root A Python-based exploit for CVE-2024-32019 , a high-severity Local Privilege Escalation vulnerability in the Netdata Agent , leveraging a misconfigured SUID binary ndsudo that fails to securely handle the PATH environment...
cve-2018-19052
cve-2022-19052 modalias security: potential path traversal with specific configs Security: potential path traversal of a single directory above the alias target with a specific modalias config where the alias which is matched does not end in /, but alias target filesystem path does end in /. e.g...
TProxer
TProxer Una extensión de Burp Suite diseñada para automatizar el proceso de encontrar SSRF basado en rutas de proxy inverso. Cómo funciona • Instalación • Por hacer • Únete a Discord Cómo funciona Intenta obtener acceso a APIs o archivos internos mediante un ataque SSRF basado en rutas. Por...
cve-2026-105221-gist-tls
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-105221-gist-tls cve-2026-105221-gist-tls gist RubyGem 6.1.0 - defunkt httpconnection sets OpenSSL::SSL::VERIFYNONE. HTTPS to GitHub still encrypts, but any certificate is accepted. An on-path peer can read th...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2020-3452_Cisco_ASA_PathTraversal
CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....
CVE-2026-79809
An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager . This flaw allows a remote attacker to influence authorization decisions and potentially be assigned an unintended role . No specific version numbers, root cause details, or remediation steps ar...
CVE-2026-79809 Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass
An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...
EUVD-2026-93895
An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...