44579 matches found
CVE-2026-53793
rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...
CVE-2026-53793 rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode
rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...
EUVD-2026-58101
rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...
ROS-20260813-73-0049
The vulnerability in libucl is related to the execution of an operation outside the buffer in memory. This vulnerability can be exploited remotely...
PT-2026-71631
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A path confinement bypass allows remote clients to escape the intended inner-module root confinement. This occurs when the module root contains a /./ boundary marker, enabling the construction of paths...
PT-2026-71892
Name of the Vulnerable Software and Affected Versions EnzoVezzaro mcp-dominican-layer versions up to 39dd373786712650097ad31db27d5c477c8f9c82 Description An issue exists in the PDF Parsing component within the parse-pdf function of the src/index.ts file. A remote attacker can manipulate the pdfUr...
PT-2026-71929
Name of the Vulnerable Software and Affected Versions dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the chunk-check endpoint within the FileChunkController.java file. A remote attacker can manipulate the Name argument to perform path traversal, which...
Linux Distros Unpatched Vulnerability : CVE-2026-53788
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol...
PT-2026-71747
Name of the Vulnerable Software and Affected Versions Calix GigaSpire version 26.1.0 Description A flaw in the Web Management Interface component allows a remote attacker to cause a denial of service. This is achieved by manipulating the sessionKey argument within the 'utilities...
ROS-20260813-73-0054
The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...
Linux Distros Unpatched Vulnerability : CVE-2022-4993
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error...
Linux Distros Unpatched Vulnerability : CVE-2026-70457
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parsesizearg where the return value of snprintf is used directly as an index into a .bss-segment arr...
Linux Distros Unpatched Vulnerability : CVE-2026-53798
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferre...
Linux Distros Unpatched Vulnerability : CVE-2026-53797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent...
Linux Distros Unpatched Vulnerability : CVE-2026-53790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious...
CVE-2026-73489
creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:07+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-cqjc-rmpq-xprq...
GHSA-JP6G-7MQJ-WJ53 vulnerabilities
Vulnerabilities for packages: libssh...
io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service
A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...
EUVD-2026-57420
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
