CVE-2026-97546

A flaw was found in the Linux kernel's XFS file system. A local user could trigger this vulnerability by mounting or repairing a corrupted file system containing zero-length directory entries. When salvaging these malformed entries during directory repair operations, the kernel fails to advance a...

CVE-2026-97543

A flaw was found in the Linux kernel's XFS file system. A local user could cause a Denial of Service DoS due to a memory leak in the directory tree scrub and repair mechanisms. When an error occurs while appending a directory name to a path, the kernel fails to release previously allocated inode...

CVE-2026-97023

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is...

DEBIAN-CVE-2026-97023

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is...

CVE-2026-97023

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is...

Directory Traversal

Overview decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal via symlink extraction in index.js, where symlinks whose targets resolve outside the output directory are not validated before being written to disk. ...

Directory Traversal

Overview @xhmikosr/decompress is an Extracting archives made easy Affected versions of this package are vulnerable to Directory Traversal via symlink extraction in index.js, where symlinks whose targets resolve outside the output directory are not validated before being written to disk. An attack...

CVE-2010-4231-EXPLOIT

CVE-2010-4231 - Directory Traversal Vulnerability in Camtron and TecVoz IP Cameras CVE-2010-4231 is a directory traversal vulnerability that exists in the web-based administration interface of the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera. The vulnerability allows...

CVE-2008-5862-EXPLOIT

CVE-2008-5862 - webcamXP 5.3.2.375 和 5.3.2.410 中的目录遍历漏洞 此仓库包含 CVE-2008-5862 的利用代码，该安全漏洞存在于 webcamXP 5.3.2.375 和 5.3.2.410 build 2132 版本中。该利用代码利用目录遍历缺陷，使远程攻击者能够未经授权访问任意文件并读取其内容。 漏洞描述 CVE-2008-5862 是一个严重的安全漏洞，攻击者可通过操纵 URI 执行目录遍历攻击。通过使用编码的点-点-斜杠序列（%2F），远程攻击者可以绕过访问控制并从目标系统获取敏感信息。 利用详情 该利用代码利用...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the staging/src/k8s.io/kubectl/pkg/cmd/cp/filespec.go path handling logic. An attacker who controls the tar output from a container can write files to arbitrary locations on a Windows user’s local machine by causi...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the staging/src/k8s.io/kubectl/pkg/cmd/cp/filespec.go path handling logic. An attacker who controls the tar output from a container can write files to arbitrary locations on a Windows user’s local machine by causi...

CVE-2026-90925

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...

EUVD-2026-88291

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...

CVE-2026-87798

The LXD CLI client (Canonical LXD versions 4.0.2 up to 6.9) contains an improper link resolution vulnerability in its recursive file pull feature. An attacker with root access inside a virtual machine can escape the directory and write attacker-controlled files or directory trees to arbitrary pat...

CVE-2026-87798 LXD client recursive file pull allows directory escape via malicious VM agent

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

CVE-2026-87798 LXD client recursive file pull allows directory escape via malicious VM agent

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

CVE-2026-87798 LXD client recursive file pull allows directory escape via malicious VM agent

Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 fixed in 4.0.14, 5.0.10 and 5.21.8 on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary...

github.com/aquasecurity/trivy: Trivy: Information disclosure via directory traversal in Terraform filesystem functions

A flaw was found in Trivy. This vulnerability allows information disclosure when scanning untrusted Terraform configuration files for misconfigurations. An attacker can craft a configuration that uses filesystem functions to reference pathnames outside the designated scan root directory. This...

CVE-2026-100230

A flaw was found in Input Leap. When the drag-and-drop file transfer feature is enabled, a connected peer can exploit improper path validation to perform directory traversal. By sending a specially crafted file transfer message, an attacker can write arbitrary files outside the intended destinati...

vim: Vim: Arbitrary Code Execution via crafted directory names

A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of...