NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-106186

Google Chrome on Windows versions prior to 155.0.8059.39 is affected by an uncontrolled search path element in the CredentialProvider component. This vulnerability (CWE-427) allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. While the Chromium s...

cve-2025-48384-poc

CVE-2025-48384 PoC 이 개념 증명은 Git의 CR-path 서브모듈 구문 분석 취약점을 보여주며, git clone --recurse-submodules 중 임의의 훅 실행으로 이어집니다. ⚠️ 경고 이것은 교육 및 테스트 목적으로만 사용됩니다. 프로덕션 환경에서 실행하지 마십시오. 🧪 사용법 git clone https://github.com/yourname/cve-2025-48384-poc.git cd cve-2025-48384 chmod +x generatepoc.sh ./generatepoc.sh cd...

Exploit for CVE-2026-21589

CVE-2026-21589 - Atlassian Data Center Una...

CVE-2026-31156

CVE-2026-31156 OpenPLC-v3에는 명령줄에서 전달된 파일 경로 매개변수에 대한 유효성 검사를 수행하지 않아 발생하는 경로 주입 취약점이 있습니다. 공격자는 악성 경로를 구성하여 읽을 수 있는 모든 파일을 읽을 수 있으며, 정보 유출 위험이 있습니다. Vulnerability Type 잘못된 입력 검증 경로 주입 정보 공개 임의 파일 읽기 Vulnerability Overview gluegenerator.cpp에서 컴파일된 바이너리 프로그램에는 사용자가 제공한 파일 경로에 대한 검증 부족으로 인한 임의 파일 읽기...

CVE-2026-106103

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...

EUVD-2026-93778

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-86360

Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2024-6648

CVE-2024-6648 Prestashop ApPage Builder 플러그인의 절대 경로 탐색Absolute Path Traversal 취약점CVE-2024-6648에 대한 Nuclei 템플릿입니다. 사용법: nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

EUVD-2026-93774

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-71168

Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar 경로 탐색 스캐너 아카이브 추출 중 임의 파일 쓰기를 허용하는 tar npm 패키지의 경로 탐색 취약점인 CVE-2026-31802 에 취약한 npm 패키지를 탐지합니다. 기능 취약한 tar 버전이 있는지 package-lock.json을 스캔합니다 nodemodules에서 설치된 취약 패키지를 확인합니다 조작된 tar 아카이브로 추출 동작을 테스트합니다 취약한 tar로 이어지는 의존성 체인을 식별합니다 여러 프로젝트의 일괄 스캔을 지원합니다 JSON/CSV 보고서 생성 조치 권장 ...

CVE-2023-31747

Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: 12.2.9.2233 이하 버전에는 따옴표로 묶이지 않은 서비스 경로가 포함되어 있어, 공격자가 시스템 수준으로 권한을...

CVE-2020-13424

Exploit 제목: Joomla! 플러그인 XCloner Backup 3.5.3 - 로컬 파일 포함 인증됨 날짜: 2020-05-10 Exploit 작성자: Mehmet Kelepçe / Gais Cyber Security Exploit-Db 작성자 ID: 8763 참조: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ 공급업체 홈페이지: http://www.xcloner.com 소프트웨어 링크:...