79789 matches found
CVE-2026-116192 rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...
CVE-2026-116192
The rclone utility versions 1.37 before 1.74.2 is vulnerable to a Server-Side Request Forgery (SSRF) . This issue occurs when using the --rc-serve flag, allowing unauthenticated attackers to redirect http and netstorage backend requests. The vulnerability is triggered by supplying a double-slash ...
EUVD-2026-109449
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116191 Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116191 Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116191 Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116191
Rclone versions prior to 1.75.2 are vulnerable to a path traversal flaw in the serve webdav functionality. The root cause is the lack of validation for '..' path components , allowing unauthenticated attackers to escape the served root directory. By sending an MKCOL /.. request, an attacker can p...
poc-sky
CVE-2019-2215 on Skyworth / Coocaa TVs 9S60, Android 8.0 Te...
Exploit for CVE-2026-99999
CVE-2026-99999 PwnEscape — ลองของจริงในแล็บ ช่องโหว่นี้ทำให...
Exploit for Improper Encoding or Escaping of Output in Synology Beestation_Os
CVE-2024-10441 — RCE no autenticado en Synology DSM/BSM vía s...
Amazon Linux 2023 : cifs-utils, cifs-utils-devel, cifs-utils-info (ALAS2023-2026-3291)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3291 advisory. A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-...
Amazon Linux 2023 : ca-certificates (ALAS2023-2026-3306)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3306 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL...
Oracle Java SE 27.0.1.0.2 Java Truststore Scanner
This Ansible-based tool scans Java truststores for eMudhra and AAA root certificates removed to address CVE-2026-114820...
PT-2026-123032
Name of the Vulnerable Software and Affected Versions Rclone versions prior to 1.75.2 Description A path traversal issue exists in the serve webdav functionality. Unauthenticated attackers can write files outside the served root directory by sending an unvalidated .. path component. This is...
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have allowed an outsider to take over the machine. The updater belongs to Time4Popcorn , an abandoned cop...
Exploit for Use After Free in Linux Linux_Kernel
Honor 500 AAP-AN00 Temporary Root Skill A reproducible, sou...
CVE-2026-115929
MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1...