The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on the name of the path to the catalog, allows attackers to compromise the integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on path names in the catalog, allows attackers to compromise the accessibility of protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of the protected information...

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing a intruder to write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

CVE-2026-105820

The Vault ACL policy cache is vulnerable to a path traversal flaw (CWE-22) when policy names contain specific traversal constructs. This allows a token with a specially crafted policy name to bypass namespace boundaries and utilize the capabilities of policies defined in other namespaces, includi...

EUVD-2026-93868

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user...

EUVD-2026-93500

Payload: SQL injection in SQLite/Postgres...

NPM: Ghost: Path Traversal via Locale Setting

NPM: Ghost: Path Traversal via Locale Setting vulnerability discovered by ? in WordPress Npm ghost versions = 1.20.0, 6.64.0...

EUVD-2026-94003

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions...

EUVD-2026-94013

Backstage: Cloud storage catalog locations may cross configured storage boundaries...

EUVD-2026-94010

Backstage: Improper input validation in proxy-backend...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2024-53677

CVE-2024-53677 CVE-2024-53677에 대한 개념 증명PoC 익스플로잇 - 원격 코드 실행RCE으로 이어지는 Apache Struts 파일 업로드 경로 탐색path traversal 취약점...

CVE-2026-107166

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogspfcpxactlocalcreate of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploi...

pidrila

PIDRILA Текущий релиз: v0.1.0 2020.11.08 Обзор PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer — это действительно быстрый асинхронный прототип сканера веб-путей, разработанный командой BrightSearch для всех этичных нетсталкеров. Установка и использование git...

CVE-2026-101886

Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 are vulnerable to a path traversal vulnerability. The flaw exists because the exported crosslaunch.share activity uses an unsanitized display name from a ContentProvider during file path construction. A malicious application ...

EUVD-2026-94456

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

forbiddenpass

ОБНОВЛЕНИЕ Благодаря Knowledge-Wisdom-Understanding MrPMillz за улучшение скрипта и исправление заголовочных нагрузок. УСТАНОВКА git clone https://github.com/gotr00t0day/forbiddenpass.git cd forbiddenpass pip3 install -r requirements.txt python3 forbiddenpass.py -h ИСПОЛЬЗОВАНИЕ . . . . \ /\ | ||...