140956 matches found
CVE-2026-79805
An authenticated path traversal vulnerability exists in ClearPass Policy Manager . Exploitation of this flaw could allow an authenticated attacker to read and modify certain files on the underlying operating system. No specific software versions, root causes, or remediation steps are provided in ...
EUVD-2026-93887
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...
CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...
CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...
CVE-2026-79800
An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager . A low-privileged authenticated remote attacker could exploit this flaw to achieve remote code execution with elevated privileges on the underlying operating system. No specific patch v...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-106186
Google Chrome on Windows versions prior to 155.0.8059.39 is affected by an uncontrolled search path element in the CredentialProvider component. This vulnerability (CWE-427) allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. While the Chromium s...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
cve-2025-48384-poc
PoC para CVE-2025-48384 Esta prueba de concepto demuestra la vulnerabilidad de análisis incorrecto de submódulos con rutas CR retorno de carro de Git, lo que lleva a la ejecución arbitraria de hooks durante git clone --recurse-submodules. ⚠️ Advertencia Esto es solo para fines educativos y de...
Exploit for CVE-2026-21589
CVE-2026-21589 - Atlassian Data Center Una...
CVE-2026-31156
CVE-2026-31156 Existe una vulnerabilidad de inyección de rutas en OpenPLC-v3, que surge de que el programa no realiza ninguna comprobación de validez sobre los parámetros de ruta de archivo pasados desde la línea de comandos. Los atacantes pueden leer cualquier archivo legible mediante la...
CVE-2026-106103
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
EUVD-2026-93778
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2026-86360
Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...
CVE-2024-6648
CVE-2024-6648 Plantilla de Nuclei para CVE-2024-6648, traversal de ruta absoluta en el plugin ApPage Builder de Prestashop. Uso: nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml...
CVE-2026-71168
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...