CVE-2026-72744: Exposure of Sensitive Information to an Unauthorized Actor

Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint GET /.well-known/appspecific/com.chrome.devtools.json. The endpoint's local-request gate isLocalDevRequest is header-based and trusts the...

PT-2026-80220

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7c4v-fwgw-9rf7. This link is maintained to preserve external references. Original Description Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development...

EUVD-2007-0834

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-2420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to ga...

The vulnerability of the backup_xi.sh script, a Nagios XI monitoring tool, allows a hacker to delete any files they desire.

The vulnerability of the backupxi.sh script, a monitoring tool for Nagios XI, is related to an uncontrolled recursion during the processing of parameters name and rootdir. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...

MGASA-2018-0279 Updated leptonica packages fix security vulnerabilities

This update fixes a security issue potential injection attack using gplot rootdir originally reported in CVE-2018-3836. This fix was incomplete and again reported in CVE-2018-7440 and CVE-2018-7442. The improved fix is included in leptonica-1.76.0...

Updated leptonica packages fix a security vulnerability

Package leptonica has been updated to the current stable version 1.75.2 which fixes a security issue potential injection attack using gplot rootdir reported in CVE-2018-3836...

Hashtopussy Cross-Site Scripting Vulnerability

Hashtopussy is a cross-platform client-server tool for distributing hash table tasks between multiple computers, featuring portability, stability and multi-user support. A cross-site scripting vulnerability exists in Hashtopussy version 0.4.0. A remote attacker can exploit this vulnerability with...

CVE-2017-11682

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 version, 2 url, or 3 rootdir parameter in hashcat.php...

CVE-2017-11682: Improper Neutralization of Input During Web Page Generation

Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 version, 2 url, or 3 rootdir parameter in hashcat.php...

PT-2017-12174

Name of the Vulnerable Software and Affected Versions Hashtopussy version 0.4.0 Description A stored Cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the version, url, or rootdir parameters in "hashcat.php". Recommendations For version 0.4.0, consider...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the rootdir/init.rc function in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

CVE-2016-2420

rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to gain privileges via a crafted application, aka internal bug 26403620...

Design/Logic Flaw

rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debuggerd component, which allows attackers to gain privileges via a crafted application, aka internal bug 26403620...

PT-2016-1715

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Description The issue is related to the rootdir/init.rc function in the Android operating system, which has insufficient access control. This allows attackers to gain privileges via a crafted application. The...

MundiMail 0.8.2 - Remote Code Execution

MundiMail 0.8.2 - Remote Code Execution Reference: http://www.ccat.edu.mx/advisors/advisor5/advisor5.html Credits: Ccat Research Labs - México - Coatepec, Ver. www.ccat.edu.mx Software Link: http://sourceforge.net/projects/mundimail/ Tested on: Debian, Centos & Windows Server 2000 Preview: Code...

Remote file inclusion

PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...

CVE-2007-5573: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 intern/admin/other/backup.php, 2 intern/admin/, 3 intern/clan/memberadd.php, 4 intern/config/key2.php, or 5 intern/config/forum.php...

CVE-2007-4636: Improper Input Validation

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 intern/admin/other/backup.php, 2 intern/admin/, 3 intern/clan/memberadd.php, 4 intern/config/key2.php, or 5 intern/config/forum.php...