PacsOne Server 7.3.9 - Path Traversal in the DICOMweb STOW-RS Store Path (CWE-22 — Detect

Fingerprint / reachability check for PacsOne Server 7.3.9 - Path Traversal in the DICOMweb STOW-RS Store Path CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for PacsOne Server 7.3.9 - Path Traversal in the DICOMweb STOW-RS Store Path CWE-22""" from kittysploit import from...

SUSE CVE-2026-110450

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

CVE-2026-110450

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

DEBIAN-CVE-2026-110450

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

CVE-2026-110450

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

UBUNTU-CVE-2026-110450

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

CVE-2026-110450

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

CVE-2026-110450

The software Nix (before version 2.35.3 ) and Lix (before version 2.95.4 ) are vulnerable to a privilege escalation issue. The root cause is a flaw in the repair operation , which could destroy and then replace a store path before content verification occurs. Exploitation details are not provided...

EUVD-2026-100806

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

PT-2026-113631

Name of the Vulnerable Software and Affected Versions Nix versions prior to 2.35.3 Lix versions prior to 2.95.4 Description A Time-of-Check to Time-of-Use TOCTOU gap exists during repair operations. This allows a local attacker to delete a store path and replace it with malicious content before t...

CVE-2026-110450: Incorrect Behavior Order

Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...

EUVD-2026-58479

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, POST /api/v1/runs/:runParam/replay in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses prisma.taskRun.findUnique where: friendlyId: runParam without a...

CVE-2026-45687 Rocket.Chat: Authenticated Arbitrary Data Export Theft via Mass Assignment in sendFileMessage

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's sendFileMessage DDP method passes the entire attacker-supplied file object into Uploads.updateFileComplete, which merges it...

CVE-2026-45687

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's sendFileMessage DDP method passes the entire attacker-supplied file object into Uploads.updateFileComplete, which merges it...

EUVD-2026-39092

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4, 8.0.5, 7.13.7, and 7.10.11, Rocket.Chat's sendFileMessage DDP method passes the entire attacker-supplied file object into Uploads.updateFileComplete, which merges it...

electV2P path traversal vulnerability

elecV2P is a network request modification and scheduled task tool developed by the elecV2 individual developer. Versions of elecV2P 3.8.3 and earlier have a path traversal vulnerability. This vulnerability stems from improper handling of parameters in the path.join function of the file/store/:key...

Astra Linux – vulnerability in Zabbix

An authenticated Zabbix user including Guest can cause excessive CPU load on the web server by sending specially crafted parameters to /imgstore.php, potentially resulting in a denial of service...

CVE-2025-49643

An authenticated Zabbix user including Guest is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service...

CVE-2025-49643

An authenticated Zabbix user including Guest is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service...

CVE-2025-62647

The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...