The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

CVE-2026-72984

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-15598

CVE-2026-15598 Uma fraqueza foi identificada no antv layout 2.0.0. Isso afeta a função setNestedValue na biblioteca lib/util/object.js. Executar uma manipulação do caminho do argumento pode levar à modificação inadequadamente controlada dos atributos do protótipo do objeto. O ataque pode ser...

CVE-2011-1571

CVE-2011-1571 Riepilogo Vulnerabilità non specificata nella portlet XSL Content di Liferay Portal Community Edition CE 5.x e 6.x prima della 6.0.6 GA, quando viene utilizzato Apache Tomcat, consente ad attaccanti remoti di eseguire comandi arbitrari tramite vettori sconosciuti. Dettaglio CVE :...

CVE-2019-19550

CVE-2019-19550 Descrizione Bypass dell'autenticazione remota in Senior Rubiweb 6.2.34.28 e 6.2.34.37 consente l'accesso amministrativo a informazioni sensibili degli utenti interessati che utilizzano versioni vulnerabili. L'attaccante deve solo fornire l'URL corretto. Date importanti Annuncio al...

CVE-2025-7558-PoC

CVE-2025-7558-PoC सारांश code-projects Voting System 1.0 में एक महत्वपूर्ण critical भेद्यता पाई गई है। प्रभावित तत्व फ़ाइल /admin/positionsadd.php का एक अज्ञात फ़ंक्शन है। Description तर्क में इस प्रकार की हेरफेर SQL इंजेक्शन की ओर ले जाती है। यह भेद्यता CVE-2025-7558 के रूप में दर्ज है। हमला...

CVE-2026-82112

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2026-37237

vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion. The AsyncMediaIO.fetchaudio and AsyncMediaIO.fetchimage functions in multimodal/inputs.py fetch user-supplied media URLs using aiohttp and call r.read without enforcing a maximum response...

CVE-2026-16440

A flaw was found in Eclipse OpenJ9. A remote attacker with low privileges could exploit this vulnerability by convincing a user to process a specially crafted .class file containing deeply nested annotations. This could lead to a segmentation fault, resulting in a Denial of Service DoS for the...

CVE-2024-32399

CVE-2024-32399 Panoramica della vulnerabilità La vulnerabilità di Directory Traversal nel RaidenMAILD Mail Server v.4.9.4 e versioni precedenti consente a un attaccante remoto di ottenere informazioni sensibili tramite il componente /webeditor/ Tipo di vulnerabilità Directory Traversal Fornitore...

CVE-2004-2271

CVE-2004-2271 Minishare 1.4.1 Buffer overflow remoto...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. Descrizione : Sfruttare un attacco Cross-site request forgery CSRF per ottenere una Command Injection tramite la funzionalità File Manager di Webmin Versione testata : Webmin 1.973 ultima versione su GitHub 07/03/2021 Tipo di attacco: Remoto Impatto : Esecuzione di...

CVE-2021-32156

..| CSRF to RCE CRON |.. Descrizione : Sfruttare un attacco di Cross-site request forgery CSRF per ottenere una Remote Command Execution RCE tramite la funzionalità Scheduled Cron Jobs di Webmin Versione testata : Webmin 1.973 ultima versione di GitHub 07/03/2021 Tipo di attacco: Remoto Impatto :...

CVE-2021-31761

..| CVE-2021-31761 |.. Beschreibung : Ausnutzen eines reflektierten Cross-Site-Scripting-Angriffs XSS, um über die Funktion für laufende Prozesse von Webmin eine Remote Command Execution RCE zu erreichen Getestete Version : Webmin 1.973 die neueste GitHub-Version 07/03/2021 Angriffstyp: Remote...

CVE-2021-3138

..| Discourse 2.7.0 - CVE-2021-3138 |.. Beschreibung : Rate-Limit-Bypass, der zu einem 2FA-Bypass führt Getestete Version : 2.7.0 Angriffsart: Remote Auswirkungen : 2FA-Bypass Produkthersteller : https://www.discourse.org Zusätzliche Informationen : Discourse ist eine Diskussionsplattform, die fü...

CVE-2026-82111

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

CVE-2026-82112

A path traversal vulnerability exists in the houtini-ai/houtini-lm project (versions up to 2.13.2 ), specifically in the code_task_files component within src/index.ts . A remote attacker with low privileges and user interaction can manipulate an unknown function to read files outside the intended...

EUVD-2026-67712

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2021-26832

CVE-2021-26832 Descrizione suggerita Cross Site Scripting XSS nel modulo della pagina "Reset Password" di Priority Enterprise Management System v8.00 consente agli aggressori di eseguire javascript per conto della vittima inviando un URL dannoso o indirizzando la vittima a un sito dannoso. Tipo d...

CVE-2026-82111

iswalle getnote-mcp (up to version 1.5.0 ) is affected by a path traversal vulnerability in the upload_image component. The affected element is the fs.readFileSync function in src/index.ts, where manipulation of the image_path argument allows an attacker to read files outside the intended directo...