4112 matches found
CVE-2026-68524
A flaw was found in Apache OFBiz. An unauthenticated remote attacker can exploit improper temporary file handling by accessing an open file descriptor and injecting a file URI Uniform Resource Identifier. This issue allows the attacker to force the application to load an attacker-controlled scree...
CVE-2026-68524
An unauthenticated attacker can exploit temporary-file handling, access an open file descriptor, and inject a "file:" URI to cause OFBiz to load an attacker-controlled Screen definition. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which...
CVE-2026-68524
Apache OFBiz versions prior to 24.09.08 are vulnerable to Pre-Authentication Remote Code Execution (RCE). An unauthenticated attacker can exploit temporary-file handling and access an open file descriptor to inject a "file:" URI , forcing the application to load an attacker-controlled Screen defi...
CVE-2026-121549: jarun nnn: nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local…
nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived path so the victim's plugin truncates and...
printix-CVE-2022-25090
CVE-2022-25090 Instead of printing your homework as a user, print your system security policies as SYSTEM for fun. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap Contributing Licen...
PoC_CVE-2023-24055
PoCCVE-2023-24055 How to run ? Edit the $User var in the script and replace value with your Username. Open a PowerShell as administrator and run the script : ./PoCCVE-2023-24055.ps1 After the script execution open KeePass. Result is stored under "C:\Users\yourusername\AppData\Local\Temp\output.xm...
CVE-2014-5284
CVE-2014-5284 Bash implementation of CVE-2014-5284 Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Python is nice but doesn't work all the time Exploit Author: mbadanoiu Python Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...
Linux Distros Unpatched Vulnerability : CVE-2026-97209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file...
Safenet_SAC_CVE-2021-42056
Safenet Authentication Client Privilege Escalation CVE-2021-42056 Based on Thales' website 1, SafeNet Authentication Client – is a middleware client that manages Thales' extensive SafeNet portfolio of certificate-based authenticators, including eTokens, SafeNet IDPrime smart cards, USB and...
CVE-2026-97209
Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned dependency compilation passes the project configuration to each partition VM through a file in a fixed-name directory under th...
CVE-2026-97209
Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned dependency compilation passes the project configuration to each partition VM through a file in a fixed-name directory under th...
CVE-2026-97209: elixir-lang elixir: Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another…
Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned dependency compilation passes the project configuration to each partition VM through a file in a fixed-name directory under th...
SUSE CVE-2026-116131
HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits the whole body on its separators at once, creating one scalar per separator before any field is stored. This costs about 9...
SUSE CVE-2026-116132
HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...
CVE-2026-116131
HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits the whole body on its separators at once, creating one scalar per separator before any field is stored. This costs about 9...
DEBIAN-CVE-2026-116131
HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits the whole body on its separators at once, creating one scalar per separator before any field is stored. This costs about 9...
CVE-2026-116131
HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits the whole body on its separators at once, creating one scalar per separator before any field is stored. This costs about 9...
DEBIAN-CVE-2026-116132
HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...
CVE-2026-116132 HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk
HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...
CVE-2026-116132
HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...