500 matches found
Bazaar_poc
Bazaarpoc Bazaar v1.4.3 Arbitrary File Read Vulnerability CVE-2024-40348 python Bazaarpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: Bazaarpoc.py...
Astra Linux – Vulnerability in ruby-rails-html-sanitizer
Possible XSS Vulnerability in Rails::Html::Sanitizer There is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. This vulnerability has been assigned the CVE identifier CVE-2022-32209. Vulnerabilities affected: ALL Not affected: NONEMeaning: Fixed versions: v1.4.3...
CLEANSTART-2026-ME27346 Security fixes in rekor-backfill-index 1.4.3-r1
Package rekor-backfill-index version 1.4.3-r1 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...
CVE-2026-62670
CVE-2026-62670 is a fail-open authorization flaw in the Grav Flex Objects Plugin (by Trilby Media) prior to version 1.4.3 . The requireFlexPermission() method in classes/Api/FlexApiController.php (Admin Next API) returns without denying access when a directory blueprint omits config.admin.permiss...
Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...
Important: Red Hat Security Advisory: RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release
The 1.4.3 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20...
CLSA-2026-1773274563 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.4.3-tuxcare.1...
CLSA-2026-1772669613 TuxCare security update for node-uuid (1 CVE)
TuxCare rebuilt node-uuid to address 1 CVE. Fixed in 1.4.3-tuxcare.1...
EUVD-2026-45957
FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files...
SUSE CVE-2026-41135
free5GC UDR is the Policy Control Function PCF for free5GC, an an open-source project for 5th generation 5G mobile core networks. A memory leak vulnerability in versions prior to 1.4.3 allows any unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory...
CLEANSTART-2026-JI09100 Security fixes in rekor-fips 1.4.3-r0
Package rekor-fips version 1.4.3-r0 fixes 1 vulnerabilities: ghsa-j5w8-q4qc-rx2x...
WordPress Shortcodify plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Shortcodify versions = 1.4.3...
CVE-2026-54910
FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the subtitlesHandler endpoint GET /api/media/subtitles accepts two user-controlled query parameters: path and name, both of which are used in filesystem operations without sanitization, creating two...
CVE-2026-54910 FileBrowser Quantum's path traversal issue in subtitle handler allows any authenticated user to read arbitrary files
FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the subtitlesHandler endpoint GET /api/media/subtitles accepts two user-controlled query parameters: path and name, both of which are used in filesystem operations without sanitization, creating two...
PT-2026-61605
Name of the Vulnerable Software and Affected Versions FileBrowser Quantum versions prior to 1.4.3-beta Description The subtitlesHandler endpoint GET /api/media/subtitles contains path traversal flaws due to insufficient sanitization of the path and name query parameters. The path parameter is...
CVE-2026-16225
A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7peer.cpp. The manipulation of the argument PDULength results in out-of-bounds write. The attack can be executed remotely. The exploit h...
CVE-2026-62235 Grav Flex-Objects < 1.4.3 Authorization Bypass via API
Grav Flex-Objects before version 1.4.3 contains a broken access control vulnerability in the admin-next REST API that allows authenticated users with only api.access permission to perform unauthorized CRUD operations on permission-less directories. Attackers with api.access credentials can create...
OPENSUSE-SU-2026:11301-1 runc-1.4.3-1.1 on GA media
These are all security issues fixed in the runc-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2026-43411
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themelexus Kitchor kitchor allows PHP Local File Inclusion.This issue affects Kitchor: from n/a through = 1.4.3...