8 matches found
CVE-2026-95272
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
CVE-2026-95272
CVE-2026-95272 affects dgtlmoon changedetection.io up to version 0.60.7 , specifically the static_content function in changedetectionio/flask_app.py within the Screenshot Handler component. Manipulation of the filename argument enables a path traversal vulnerability, allowing remote attackers wit...
EUVD-2026-84365
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
CVE-2026-95272 dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
CVE-2026-95272 dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
PT-2026-96715
Name of the Vulnerable Software and Affected Versions dgtlmoon changedetection.io versions prior to 0.60.8 Description A path traversal issue exists in the Screenshot Handler component within the static content function of the changedetectionio/flask app.py file. A remote attacker can exploit thi...
CVE-2026-95272: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
CVE-2026-58056
RustDesk is affected by a session-authorization scope bypass in FileTransfer sessions. The root cause is gating incoming control messages on per-capability flags rather than the session’s authorized connection type; a peer with only valid FileTransfer authorization can inject keyboard/mouse input...