Lucene search
+L

63729 matches found

OSV
OSV
added 2026/07/07 4:52 p.m.9 views

GO-2026-5762 Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish

Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish...

9.6CVSS6AI score0.00393EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/07 4:41 p.m.9 views

GO-2026-5801 Incus has an arbitrary file write on host via `exec-output` symlink in crafted image in github.com/lxc/incus

Incus has an arbitrary file write on host via exec-output symlink in crafted image in github.com/lxc/incus...

6AI score
SaveExploits0References1
OSV
OSV
added 2026/07/07 4:41 p.m.9 views

GO-2026-5806 Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus

Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus...

6AI score
SaveExploits0References1
OSV
OSV
added 2026/07/07 4:41 p.m.15 views

GO-2026-5802 Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus

Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus...

6AI score0.00091EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/07 4:41 p.m.11 views

GO-2026-5498 Portainer has a path traversal in backup archive extraction that allows arbitrary file write in github.com/portainer/portainer

Portainer has a path traversal in backup archive extraction that allows arbitrary file write in github.com/portainer/portainer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

5.5CVSS6AI score0.00606EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/07 4:41 p.m.12 views

GO-2026-5923 Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/07/07 4:41 p.m.14 views

GO-2026-5922 Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder...

5.4CVSS5.9AI score0.00224EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/07 4:3 p.m.11 views

PYSEC-2026-1272 Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true

Impact Copier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write to arbitrary directories outside the...

7.1CVSS6AI score0.00224EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/07 4:3 p.m.9 views

PYSEC-2026-2053 Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command

Impact Multi-translation download could write to an arbitrary location when instructed by a crafted server. Patches https://github.com/WeblateOrg/wlc/pull/1128 Workarounds Do not use wlc download with untrusted servers. References This issue was reported to us by wh1zee via HackerOne...

8CVSS6.1AI score0.00337EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/07 4:3 p.m.12 views

PYSEC-2026-1791 Picklescan vulnerable to Arbitrary File Writing

Summary Picklescan has got open and shutil in its default dangerous blocklist to prevent arbitrary file overwrites. However the module distutils isnt blocked and can be used for the same purpose ie to write arbitrary files. Details This is another vulnerability which impacts the downstream user. ...

9.3CVSS6.1AI score0.00624EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/07 4:3 p.m.11 views

PYSEC-2026-1841 Pyrofork has a Path Traversal in download_media Method

Summary The downloadmedia method in Pyrofork does not sanitize filenames received from Telegram messages before using them in file path construction. This allows a remote attacker to write files to arbitrary locations on the filesystem by sending a specially crafted document with path traversal...

6.5CVSS6.6AI score0.0031EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 4:3 p.m.10 views

PYSEC-2026-1354 Exiv2 Segmentation Faults in Exiv2::EpsImage::writeMetadata() via crafted EPS file

Impact An out-of-bounds read was found in Exiv2 versions v0.28.5 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image...

1.8CVSS5.9AI score0.00142EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 4:3 p.m.13 views

PYSEC-2026-1670 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

Summary The vulnerability allows any user to overwrite any files available under the account privileges of the running process. Details As part of static analysis, iOS MobSF supports loading and parsing statically linked libraries .a. When parsing such archives, the code extracts the embedded...

6.5CVSS6AI score0.006EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/07 4:2 p.m.14 views

PYSEC-2026-1226 Bugsink path traversal via event_id in ingestion

Summary In affected versions, ingestion paths construct file locations directly from untrusted eventid input without validation. A specially crafted eventid can result in paths outside the intended directory, potentially allowing file overwrite or creation in arbitrary locations. Submitting such...

7.1CVSS6AI score0.00538EPSS
SaveExploits0References13
OSV
OSV
added 2026/07/07 4:2 p.m.16 views

PYSEC-2026-1823 `pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write

Summary An authenticated path traversal vulnerability exists in the /json/upload endpoint of the pyLoad By manipulating the filename of an uploaded file, an attacker can traverse out of the intended upload directory, allowing them to write arbitrary files to any location on the system accessible ...

7.5CVSS6.2AI score0.00645EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/07 4:2 p.m.9 views

PYSEC-2026-1194 Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code

Path-Traversal - Arbitrary File Write in Assemblyline Service Client IMPORTANT: This vulnerability is valid if you decide to use the assemblyline-service-client outside of the normal practice to using Assemblyline in a production environment. In practice, this code should always be executed withi...

4.2CVSS6.2AI score0.00552EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/07/07 4:2 p.m.23 views

CVE-2026-57851 MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers

MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator...

8.5CVSS6AI score0.0017EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/07 4:2 p.m.48 views

CVE-2026-57851 MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers

MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator...

8.5CVSS0.0017EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/07 4:2 p.m.41 views

CVE-2026-57851

MSI Feature Manager contains a local privilege escalation via the KernCoreLib64.sys kernel driver. An attacker with local access can use exposed IOCTL handlers to perform arbitrary physical memory read/write and unrestricted I/O port operations without administrator privileges. This can enable ma...

8.5CVSS6AI score0.0017EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/07 3:26 p.m.10 views

GO-2026-5827 gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host in go.senan.xyz/gonic

gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host in go.senan.xyz/gonic...

8.1CVSS6.1AI score0.00428EPSS
SaveExploits0References2
Rows per page
Query Builder