46 matches found
The vulnerability of the `check_unsafe_options` mechanism in the Python library for interacting with Git repositories, GitPython, allows a malicious actor to execute arbitrary code.
The vulnerability of the checkunsafeoptions mechanism in the Python library for interacting with Git repositories, GitPython, is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to rewrite any files in the system remote...
CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access
A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...
CVE-2026-40893
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifTool happily renames the file. This allows remote attackers to move, rename, and change permissions for arbitrary files...
EUVD-2002-1329
Malware in sbrugna...
EUVD-2020-26770
Malware in sbrugna...
EUVD-2002-1328
Malware in sbrugna...
EUVD-2003-1288
Malware in sbrugna...
EUVD-2008-4324
Malware in sbrugna...
EUVD-2007-4737
Malware in sbrugna...
EUVD-2008-2394
Malware in sbrugna...
EUVD-2014-4829
Malware in sbrugna...
EUVD-2006-0582
Malware in sbrugna...
EUVD-2013-3478
Malware in sbrugna...
EUVD-2005-0361
Malware in sbrugna...
EUVD-2021-8069
Malicious code in bioql PyPI...
EUVD-2023-58595
Malicious code in bioql PyPI...
CVE-2003-1280
Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a .. dot dot in multipart/form-data uploads...
CVE-2023-6354: Improper Authentication
Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the PDFViewer.aspx 'filename' parameter...
PT-2023-2874 · D Link · D-Link D-View
Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this issue. The specific flaw...