rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Buffer Overflow Vulnerability Overview In rtty totalsize = ctx-remainsize = bufferpullu32beinfo; ment = findmountpointsavepath; if ment uint64t avail; if !strcmpment-mnttype, "ramfs" struct sysinfo si; if sysinfo&si logerr"download file fail:...

CVE-2026-18953

CVE-2026-18953 — PoC Arbitrary file write in awslabs.aws-transform-mcp-server AWS Transform MCP server via the savePath parameter of the getresource tool. | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — Improper Limitation of a Pathname to a Restricted Directory Affected|...

Directory Traversal

Overview awslabs.aws-transform-mcp-server is an An AWS Labs Model Context Protocol MCP server for AWS Transform — manage transformation workspaces, jobs, connectors, HITL tasks, artifacts, and chat Affected versions of this package are vulnerable to Directory Traversal via the getresource process...

CVE-2026-18953

Improper limitation of a pathname to a restricted directory in the getresource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this...

CVE-2026-18953

CVE-2026-18953 affects the Amazon awslabs.aws-transform-mcp-server package (versions 0.1.0–0.1.4). The issue is an improper limitation of a pathname to a restricted directory in the get_resource tool, which could allow a context-dependent actor to write arbitrary files outside the intended workin...

CVE-2026-18953

Improper limitation of a pathname to a restricted directory in the getresource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this...

CVE-2026-18953: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory in the getresource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this...

PT-2026-68306

Name of the Vulnerable Software and Affected Versions Amazon awslabs.aws-transform-mcp-server versions 0.1.0 through 0.1.4 Description Improper limitation of a pathname to a restricted directory in the get resource tool allows a context-dependent actor to write arbitrary files outside the intende...

Exploit for CVE-2025-56708

CVE-2025-56708&CVE-2025-56709 【CVE-2025-56709】savepath Bu...

Faleemi Desktop Software 1.8.2 - SavePath for ScreenShots Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: Faleemi Desktop Software 1.8.2 - 'SavePath for ScreenShots' Buffer Overflow SEH Author: Gionathan "John" Reale Software Link: http://support.faleemi.com/fsc776/Faleemiv1.8.exe Tested Version: 1.8.2 Tested on OS: Windows 7 32bi...

iSmartViewPro 1.5 - SavePath for ScreenShots Local Buffer Overflow (SEH)

iSmartViewPro 1.5 - SavePath for ScreenShots Local Buffer Overflow SEH...

Monitoring software iSmartViewPro 1.5 - SavePath for ScreenShots Buffer Overflow

Monitoring software iSmartViewPro 1.5 - SavePath for ScreenShots Buffer Overflow...

iSmartViewPro 1.5 Buffer Overflow

Exploit Title: iSmartViewPro 1.5 - 'SavePath for ScreenShots' Local Buffer Overflow Author: Shubham Singh Known As: Spirited Wolf Twitter: @Pwsecspirit Discovey Date: 2018-08-12 Software Link: https://securimport.com/university/videovigilancia-ip/software/493-software-ismartviewpro-v1-5 Tested...