281 matches found
CVE-2026-118527
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk...
EUVD-2026-115872
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk...
CVE-2026-118527
Ivanti Connect Secure is affected by CVE-2026-118527 , a vulnerability involving the generation of predictable numbers or identifiers (CWE-340). This flaw allows a remote authenticated attacker to upload files containing attacker-controlled content to a known location on the disk. This vulnerabil...
CLEANSTART-2026-JD64179 "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp")
CVE-2026-39819 affects multiple packages. The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". See references for individual vulnerability details...
EUVD-2026-105103
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames...
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
Summary When a user exports content through @apostrophecms/import-export, the module copies the generated archive into uploadfs at /exports/ and returns a public URL under /uploads/exports/. The filename is fully deterministic: site shortName, document type, a YYYYMMDDHHmmss timestamp, and the...
Information Exposure
Overview @apostrophecms/import-export is an Import Export Documents for ApostropheCMS Affected versions of this package are vulnerable to Information Exposure due to predictable filenames for publicly accessible export archives under /uploads/exports/. Filenames are generated from the site’s...
CVE-2026-112953
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...
CVE-2026-112953
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...
CVE-2026-112953 ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...
CVE-2026-112953
The ApostropheCMS content management system is vulnerable to an information exposure flaw in the import-export module prior to version 3.7.1 . The root cause is the use of predictable export archive filenames , which allows an unauthenticated requester to download another user's export from publi...
CVE-2026-112953 ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...
CVE-2026-112953 ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...
PT-2026-118449
Name of the Vulnerable Software and Affected Versions ApostropheCMS import-export module versions prior to 3.7.1 Description Predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires o...
Apostrophe Technologies ApostropheCMS information leakage vulnerability
Apostrophe Technologies' ApostropheCMS has a vulnerability related to information leakage. This vulnerability arises from the predictable nature of the exported archive file names, allowing unauthenticated requests to download other users’ exports from publicly readable export storage, before the...
gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility
A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...
CVE-2026-78255
The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...
CVE-2026-78255 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...
EUVD-2026-64746
The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...
CVE-2026-78255 DJI Drone HTTP Media Server Allows Unauthenticated Access to Stored Media
The HTTP media server running on DJI drones serves stored photos and videos through the /v2 endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored...