Bazaar_poc

Bazaarpoc Vulnerabilidad de lectura arbitraria de archivos Bazaar v1.4.3 CVE-2024-40348 python Bazaarpoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--'...

CLEANSTART-2026-ME27346 Security fixes in rekor-backfill-index 1.4.3-r1

Package rekor-backfill-index version 1.4.3-r1 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...

Astra Linux – Vulnerability in ruby-rails-html-sanitizer

Possible XSS Vulnerability in Rails::Html::Sanitizer There is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. This vulnerability has been assigned the CVE identifier CVE-2022-32209. Vulnerabilities affected: ALL Not affected: NONEMeaning: Fixed versions: v1.4.3...

CVE-2026-62670

CVE-2026-62670 is a fail-open authorization flaw in the Grav Flex Objects Plugin (by Trilby Media) prior to version 1.4.3 . The requireFlexPermission() method in classes/Api/FlexApiController.php (Admin Next API) returns without denying access when a directory blueprint omits config.admin.permiss...

Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release

The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...

Important: Red Hat Security Advisory: RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release

The 1.4.3 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20...

CLSA-2026-1773274563 TuxCare security update for shell-quote (9 CVEs)

TuxCare rebuilt shell-quote to address 9 CVEs. Fixed in 1.4.3-tuxcare.1...

CLSA-2026-1772669613 TuxCare security update for node-uuid (9 CVEs)

TuxCare rebuilt node-uuid to address 9 CVEs. Fixed in 1.4.3-tuxcare.1...

EUVD-2026-45957

FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files...

CLEANSTART-2026-JI09100 Security fixes in rekor-fips 1.4.3-r0

Package rekor-fips version 1.4.3-r0 fixes 1 vulnerabilities: ghsa-j5w8-q4qc-rx2x...

WordPress Shortcodify plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Shortcodify versions = 1.4.3...

CVE-2026-54910

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the subtitlesHandler endpoint GET /api/media/subtitles accepts two user-controlled query parameters: path and name, both of which are used in filesystem operations without sanitization, creating two...

CVE-2026-54910 FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the subtitlesHandler endpoint GET /api/media/subtitles accepts two user-controlled query parameters: path and name, both of which are used in filesystem operations without sanitization, creating two...

PT-2026-61605

Name of the Vulnerable Software and Affected Versions FileBrowser Quantum versions prior to 1.4.3-beta Description The subtitlesHandler endpoint GET /api/media/subtitles contains path traversal flaws due to insufficient sanitization of the path and name query parameters. The path parameter is...

CVE-2026-16225

A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7peer.cpp. The manipulation of the argument PDULength results in out-of-bounds write. The attack can be executed remotely. The exploit h...

CVE-2026-62235 Grav Flex-Objects < 1.4.3 Authorization Bypass via API

Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that allows authenticated users with only api.access permission to perform unauthorized CRUD operations on permission-less directories. Attackers with api.access credentials can create...

OPENSUSE-SU-2026:11301-1 runc-1.4.3-1.1 on GA media

These are all security issues fixed in the runc-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-57795

CVE-2026-57795 affects the WordPress theme Kitchor (Themelexus) up to version

CVE-2026-57376 WordPress ElementInvader Addons for Elementor plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue affects ElementInvader Addons for Elementor: from n/a through = 1.4.3...

CVE-2026-15105

A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7server.cpp of the component ReadVar Request Handler. This manipulation causes out-of-bounds write. The attack requires access to the local network. The exploit...