Lucene search
+L

333973 matches found

NVD
NVD
•added 2026/10/22 11:17 a.m.•10 views

CVE-2021-48014

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...

9.8CVSS0.02031EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/22 10:57 a.m.•10 views

EUVD-2021-34897

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...

9.8CVSS6.6AI score0.02031EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/22 10:57 a.m.•35 views

CVE-2021-48014

FineReport 9.0 is affected by a path traversal vulnerability within the /WebReport/ReportServer design_save_svg operation. This flaw allows unauthenticated attackers to write arbitrary files by providing directory traversal sequences in the filePath parameter. By sending a POST request containing...

9.8CVSS6.6AI score0.02031EPSS
SaveIn wildExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/22 10:57 a.m.•10 views

CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...

9.8CVSS6.6AI score0.02031EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/22 10:57 a.m.•30 views

CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...

9.8CVSS0.02031EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/10/22 10:51 a.m.•13 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shellcheck All-in-one, read-only local checker for t...

9.8CVSS9.2AI score0.99999EPSS
SaveExploits508
GithubExploit
GithubExploit
•added 2026/10/22 10:18 a.m.•13 views

php-cve-2026-fix

php-cve-2026-fix A single Bash script that finds every PHP...

9.8CVSS9.2AI score0.99999EPSS
SaveExploits508
RedHat Linux
RedHat Linux
•added 2026/10/22 10:10 a.m.•11 views

Important: Red Hat Security Advisory: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.5CVSS8AI score0.0034EPSS
SaveExploits1References17
GithubExploit
GithubExploit
•added 2026/10/22 10:08 a.m.•12 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shellscanner Non-destructive exposure assessment for C...

9.8CVSS9.2AI score0.99999EPSS
SaveExploits436
GithubExploit
GithubExploit
•added 2026/10/22 10:04 a.m.•13 views

php2shell-detection

php2shell exposure assessment CVE-2026-109618 / CVE-2026-1096...

9.8CVSS8.9AI score0.99999EPSS
SaveExploits508
GithubExploit
GithubExploit
•added 2026/10/22 9:58 a.m.•15 views

Exploit for Code Injection in Geoserver

CVE-2024-36401 — GeoServer OGC filter evaluation RCE PoC and...

9.8CVSS8.9AI score0.99813EPSS
SaveExploits29
SUSE Linux
SUSE Linux
•added 2026/10/22 9:58 a.m.•9 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.8CVSS8.4AI score0.21622EPSS
SaveExploits2References514
osv_suse
osv_suse
•added 2026/10/22 9:58 a.m.•12 views

SUSE-SU-2026:4858-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

9.8CVSS8.5AI score0.21622EPSS
SaveExploits12References258
GithubExploit
GithubExploit
•added 2026/10/22 9:48 a.m.•18 views

Exploit for CVE-2026-62356

English | 中文 CVE-2026-62356 — Re...

7.8AI score
SaveExploits2
GithubExploit
GithubExploit
•added 2026/10/22 9:14 a.m.•11 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 Detection Tools Two detecti...

9.8CVSS9.4AI score0.99999EPSS
SaveExploits508
GithubExploit
GithubExploit
•added 2026/10/22 8:52 a.m.•55 views

Exploit for CVE-2026-111497

CVE-2026-111497 | | | |---|---| | CVE | CVE-2026-111497 |...

8AI score0.82641EPSS
SaveExploits53
GithubExploit
GithubExploit
•added 2026/10/22 8:48 a.m.•14 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell — CVE-2026-109618 Pre-auth use-after-free in PHP...

9.8CVSS8.9AI score0.99999EPSS
SaveExploits490
Veracode
Veracode
•added 2026/10/22 8:42 a.m.•13 views

Pillow: Heap Use-after-free When Encoding TIFF To An In-memory Buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When "TIFFWriteScanline" fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, "TIFFClose" flushe...

7.5CVSS7.3AI score0.00694EPSS
SaveExploits2Affected Software1
GithubExploit
GithubExploit
•added 2026/10/22 8:19 a.m.•13 views

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 - php2shell !CVE-2026-109...

9.8CVSS8.8AI score0.99999EPSS
SaveExploits508
GithubExploit
GithubExploit
•added 2026/10/22 8:11 a.m.•10 views

PHP2Shell-Full-Chain-Exploit

PHP2Shell — Detection & Mitigation Guide PHP session.upload...

9.8CVSS9AI score0.99999EPSS
SaveExploits508
Rows per page
Query Builder