Vulnerabilidades em patrickhener
15 resultadosAnálise Vexday
Patrick Hener apresenta 13 vulnerabilidades catalogadas, com 7 classificadas como críticas, mas nenhuma sob exploração ativa conhecida até o momento. A fraqueza dominante é traversal de diretório (CWE-22), risco tradicional mas significativo; destacam-se 6 divulgações nos últimos 90 dias, indicando atividade recente de descoberta ou correção que demanda atenção prioritária.
CVE-2025-46816CRITICALgoshs route not protected, allows command executionEPSS 0.7%CVE-2026-35393CRITICALImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs POST multipart uploadEPSS 0.7%CVE-2026-35392CRITICALgoshs has an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshs PUT UploadEPSS 0.7%CVE-2026-35471CRITICALImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in goshsEPSS 0.7%CVE-2026-40189CRITICALgoshs has a file-based ACL authorization bypass in goshs state-changing routesEPSS 0.6%CVE-2026-40884CRITICALgoshs: Empty-username SFTP password authentication bypass in goshsEPSS 0.5%CVE-2026-40876HIGHSFTP root escape via prefix-based path validation in goshsEPSS 0.4%CVE-2026-50138HIGHgoshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flagsEPSS 0.4%CVE-2026-34581HIGHgoshs has Auth Bypass via Share TokenEPSS 0.4%CVE-2026-40188HIGHgoshs is Missing Write Protection for Parametric Data ValuesEPSS 0.3%CVE-2026-40885HIGHgoshs: Public collaborator feed leaks .goshs ACL credentials and enables unauthorized accessEPSS 0.3%CVE-2026-50139MEDIUMgoshs: Share-link ?token=… redemption races past download limitEPSS 0.3%CVE-2026-40903CRITICALGoshs - ArtiPACKED Vulnerability – GitHub Actions Credential PersistenceEPSS 0.2%CVE-2026-42091MEDIUMgoshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORSEPSS 0.2%CVE-2026-40883MEDIUMgoshs: CSRF in state-changing GET routes enables authenticated file deletion and directory creationEPSS 0.1%