Lucene search
+L

6421 matches found

Cvelist
Cvelist
added 2026/07/18 7:15 p.m.65 views

CVE-2026-57848 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation

Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...

6.8CVSS0.00204EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/18 7:15 p.m.19 views

EUVD-2026-45395

Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...

6.8CVSS5.4AI score0.00204EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/18 7:15 p.m.11 views

CVE-2026-57848 Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation

Stoat for Android exports the chat.stoat.activities.ShareTargetActivity component reachable to any process on the device via the android.intent.action.SEND intent and accepts the file to share as a URI supplied through the android.intent.extra.STREAM extra. The activity does not validate or filte...

6.8CVSS5.4AI score0.00204EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/17 7:51 p.m.51 views

CVE-2026-46420

shivammathur/setup-php versions 2.25.0–2.37.0 read PHP version strings from repository-controlled files (.php-version, composer.lock, composer.json) and inject them unescaped into generated shell/PowerShell scripts, enabling command injection on GitHub Actions runners via pull_request_target work...

9.8CVSS5.5AI score0.01538EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2026/07/17 7:36 p.m.24 views

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

7.1CVSS5.3AI score0.00346EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:36 p.m.37 views

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

7.1CVSS5.3AI score0.00346EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/07/17 3:18 p.m.24 views

EUVD-2026-45189

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS6.3AI score0.0057EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/17 3:18 p.m.60 views

CVE-2026-15343 Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS0.0057EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/16 5:48 p.m.50 views

CVE-2026-44968 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, rundbtcommand in src/dbtmcp/dbtcli/tools.py appended unsanitized nodeselection and resourcetype values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-di...

6.3CVSS0.00206EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/07/16 4:45 p.m.12 views

CVE-2026-45568

zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts an absolute URL in the request path and passes it to urllib.parse.urljoin, allowing the requested path to replace the configured target host and causing...

9.9CVSS6.1AI score0.00544EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/07/16 7:01 a.m.15 views

CVE-2026-15697

A flaw was found in svgdotjs svg.js. A remote attacker could exploit a vulnerability in the EventTarget.on function, which improperly controls modifications to object prototype attributes. This could allow an attacker to manipulate object properties, potentially leading to unintended behavior or...

6.5CVSS6.6AI score0.00446EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/07/15 9:55 a.m.20 views

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

6.4CVSS6AI score0.00292EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/15 12:31 a.m.19 views

EUVD-2025-210470

A null pointer dereference vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters Channel, Account Login, TargetNavigator, etc.. The function lacks proper validation of the delegate pointer before dereferencing. ...

7.5CVSS6AI score0.00588EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/07/15 12:00 a.m.58 views

CVE-2026-61371

Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via OTRUNC, and can happen before full input validation completes “truncation-before-validation...

6.1AI score0.0053EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/15 12:00 a.m.11 views

CVE-2026-61371

Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via OTRUNC, and can happen before full input validation completes “truncation-before-validation...

7.5CVSS6.1AI score
SaveExploits0References5
CVE
CVE
added 2026/07/14 9:37 p.m.86 views

CVE-2026-54572

Rogue symlink handling in rclone before 1.74.4: when using -l/--links, rclone serializes symlinks as .rclonelink and recreates them locally without validating the target, allowing an attacker-controlled remote to plant an escaping symlink and cause subsequent writes to land outside the destinatio...

8.8CVSS6.1AI score0.00365EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2026/07/14 8:07 p.m.146 views

CVE-2026-53486

The CVE affects the Node.js decompress package used for archive extraction. Before versions 10.2.1 and 11.1.3, crafted archives could read or write files outside the target directory due to: hardlink and symlink entries being created without proper target checks; path containment validated by a s...

9.1CVSS6.1AI score0.00749EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/14 3:15 p.m.31 views

CVE-2026-15697

CVE-2026-15697 affects the svgdotjs svg.js library (up to v3.2.5). The vulnerability is in the EventTarget.on function, enabling manipulation that leads to improperly controlled modification of object prototype attributes (prototype pollution). It is described as exploitable remotely with a repor...

6.5CVSS6.4AI score0.00446EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/07/14 3:15 p.m.10 views

CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...

6.5CVSS6.4AI score0.00446EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/14 3:15 p.m.42 views

CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...

6.5CVSS0.00446EPSS
SaveExploits0References6
Rows per page
Query Builder