/
attack_type:arbitrary_file_write × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

security.paloaltonetworks.com · medium

Palo Alto Networks discloses CVE-2026-0312 path traversal flaw in Checkov by Prisma Cloud allowing arbitrary file writes

Palo Alto Networks published advisory CVE-2026-0312 describing path traversal vulnerabilities (CWE-22) in Checkov by Prisma Cloud that let an unauthenticated local user write files to arbitrary locations on the scanning filesystem. No special configuration is required to be exposed. The vendor rates it MEDIUM (CVSS-B 6.8, CVSS-BT 4.3) wit…

CVE-2026-0312
hacktron.ai · medium

Hacktron CLI AI-assisted audit of JDBC drivers finds file read/write and RCE chain in Databricks, file read in Exasol; $85K in bounties

Researcher Harsh Jaiswal of Hacktron describes using the AI-assisted Hacktron CLI with a custom "JDBC driver pack" to audit decompiled JDBC drivers during a bug bounty event. The audit surfaced multiple vulnerabilities across vendor drivers, earning $85,000 in bounties. The headline finding is in the Databricks JDBC driver, where an attac…