210 matches found
CVE-2019-9766
CVE-2019-9766 Farei o meu melhor Sobre o CVE Free MP3 CD Ripper É um conversor entre arquivos .mp3 e outros tipos de arquivo convertendo um arquivo. Bug De acordo com o NVD, podemos ver que, na vision 2.6, há um Stack-based Overflow na Área de Buffer. Então podemos criar um Poc para isso. O tipo ...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...
CVE-2026-28151
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-43637 Cornac < 2.6.0 Path Traversal via _extract_archive() in download.py
Cornac before 2.6.0 contains a path traversal Tar Slip vulnerability that allows attackers to write arbitrary files outside the intended cache directory by supplying a crafted TAR archive containing ../ sequences, absolute paths, or symlink/hardlink entries to the extractarchive function in...
PYSEC-2026-442 PaddlePaddle Path Traversal vulnerability
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6...
RHSA-2026:13508 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Bulletin has no description...
Lupa 安全漏洞
Lupa is a bridging library developed by Scoder’s individual developers, which embeds the Lua runtime into Python. Versions of Lupa 2.6 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the fact that the property filter was not consistently applied in built-in...
RHSA-2026:6277 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Bulletin has no description...
Security Bulletin: NVIDIA Apex - March 2026
NVIDIA has released an update for NVIDIA® Apex to address a security issue. To protect your system, clone or update NVIDIA Apex to include commit db8e053 or later from NVIDIA Apex. Ensure that your environment uses PyTorch 2.6 or later from PyTorch. Go to NVIDIA Product Security. Details The...
PT-2026-23331
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Yacht Rental yacht-rental allows PHP Local File Inclusion.This issue affects Yacht Rental: from n/a through = 2.6...
WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Nirvana versions = 2.6...
📄 Online Grievance Redressal Software 2.6 Cross Site Scripting
Online Grievance Redressal Software version 2.6 suffers from a cross site scripting vulnerability. ============================================================================================================================================= | Title : Online Grievance Redressal Software 2.6 XSS...
WordPress plugin DesignThemes LMS Addon 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-53651
Name of the Vulnerable Software and Affected Versions TinyFileManager versions up to 2.6 Description A path traversal flaw exists in TinyFileManager due to manipulation of the fullpath argument within the tinyfilemanager.php file. This allows for remote exploitation. The vendor was contacted...
CVE-2025-53441
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Greeny greeny allows PHP Local File Inclusion.This issue affects Greeny: from n/a through = 2.6...
CVE-2025-67539 WordPress Select Core plugin < 2.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Select-Themes Select Core select-core allows DOM-Based XSS.This issue affects Select Core: from n/a through 2.6...
WordPress Trust.Reviews plugin <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews vulnerability
Unauthenticated Stored Cross-Site Scripting via Social Media Reviews vulnerability discovered by Kishan Vyas in WordPress Plugin Trust.Reviews versions = 2.5...
PT-2025-49897
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Select Core select-core allows PHP Local File Inclusion.This issue affects Select Core: from n/a through 2.6...
PT-2025-49915
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Select-Themes Select Core select-core allows DOM-Based XSS.This issue affects Select Core: from n/a through 2.6...