CVE-2026-103870 Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

CVE-2026-103870

A path traversal flaw exists in pulp-rpm during the distribution tree publication process. The software uses addon and variant IDs from .treeinfo files as directory names without sufficient validation. An attacker with permissions to sync or upload a distribution tree can force the publish task t...

StealthCrypter

💀StealthCrypter💀 📜 الوصف StealthCrypter هي أداة تشفير قوية وسهلة الاستخدام تساعدك على حماية ملفاتك وأدلتك الحساسة باستخدام تشفير AES-256. سواء كنت بحاجة إلى حماية المستندات الشخصية أو تأمين البيانات السرية، فإن CryptShield يضمن بقاء ملفاتك خاصة ومقاومة للعبث. 🔑 الميزات ✅ تشفير AES-256 – تشفير قيا...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

SolarWinds Serv-U - Directory Traversal

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. id: CVE-2024-28995 info: name: SolarWinds Serv-U - Directory Traversal author: DhiyaneshDK severity: high description: | SolarWinds Serv-U was susceptibl...

NetAlert X - Arbitary File Read

A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18 - v24.9.12. id: CVE-2024-48766 info: name: NetAlert X - Arbitary File Read author: s4e-io severity: critical description: | A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18...

WordPress Core <=6.2 - Directory Traversal

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wplang’ parameter. id: CVE-2023-2745 info: name: WordPress Core =6.2 - Directory Traversal author: nqdung2002 severity: medium description: | WordPress Core is vulnerable to Directory Traversal in...

CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read

CVE-2025-2539 - قراءة ملف تعسفي في إضافة File Away لووردبريس 📋 ملخص تنفيذي CVE ID: CVE-2025-2539 Plugin: File Away الإصدارات = 3.9.9.0.1 Vulnerability Type: قراءة ملف تعسفي موثقة CVSS Score: 8.5 عالي Exploit Availability: PoC عام متاح Impact: كشف ملفات غير مصرح به بما في ذلك wp-config.php وبيانات...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

PT-2026-107641

Summary During an SSG build, page definitions returned by getSsgPages can provide custom dir and filename values. The builder joined those values to build.distDir and wrote the generated page without verifying that the final destination remained inside the distribution directory. Details A page...

UBUNTU-CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

Rocky Linux 9.6 [TuxCare] Security Update: ipa-client / ipa-client-common / ipa-client-encrypted-dns / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791364402)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791364402 advisory. - A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory user...

AlmaLinux 9.6 [TuxCare] Security Update: ipa-client / ipa-client-common / ipa-client-encrypted-dns / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791364402)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791364402 advisory. - A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users...

Linux Distros Unpatched Vulnerability : CVE-2026-104047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query...

PT-2026-107473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

PT-2026-107395

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

CVE-2025-57231

CVE-2025-57231 - Docmost 0.22.0 - Lecture arbitraire de fichiers Ce dépôt contient un exploit Proof of Concept PoC pour CVE-2025-57231. Avertissement Ce projet est fourni à des fins éducatives et pour des tests de sécurité autorisés uniquement. Ne l'utilisez pas contre des systèmes que vous ne...

CVE-2024-57784

CVE-2024-57784 Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional arguments: -h,...

DEBIAN-CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

AZL-106700 CVE-2026-106552 affecting package openssh 9.8p1-10

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...