CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

EUVD-2026-93994

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...

CVE-2026-106552

In OpenSSH versions before 10.6 , the sftp component is vulnerable to a directory traversal flaw during a recursive copy operation . This issue can cause files to be written to unintended locations on the system. No specific exploit information or links are provided in the documents, but the vuln...

DEBIAN-CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-102156

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

CVE-2026-106451 yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without...

CVE-2026-106451 yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without...

CVE-2026-106451 yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without...

CVE-2026-102156 Security Advisory 0191

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

EUVD-2026-93959

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

EUVD-2026-93941

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-106109 Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories

Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir before building without rejecting the project root, user home directory, filesystem roots, or symlink-resolved external...

CVE-2026-106109

The Quasar Framework 's @quasar/app-vite component (versions 1.0.0 through 3.3.0) contains a vulnerability where it recursively removes the build.distDir before building. The root cause is a lack of validation to reject sensitive paths such as the project root, user home directory, filesystem roo...

CVE-2026-95140

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...

cve-2021-42013

أباتشي 2.4.50 - اجتياز المسار أو تنفيذ الأوامر عن بُعد cve-2021-42013.py هو سكربت بايثون يساعد في اكتشاف ثغرة اجتياز المسار أو تنفيذ الأوامر عن بُعد في أباتشي 2.4.50. يتم توفير نسخة Docker قابلة للاستغلال لتجربتها عمليًا على CVE-2021-42013 إذا تم تفعيل CGI-BIN، يمكننا تنفيذ الأوامر عن بُعد ولكن ل...

CVE-2026-42048

CVE-2026-42048 CVE-2026-42048 Langflow اجتياز المسار / إثبات المفهوم لحذف الدليل التعسفي https://github.com/user-attachments/assets/6e5481ff-e953-47a5-8870-70b30c6550de الوصف CVE-2026-42048 : ثغرة حذف دليل تعسفي في Langflow الوصف: ثغرة اجتياز المسار في Langflow قبل الإصدار 1.9.0 تسمح لمهاجم مُوثَ...

NewMachineAccount

NewMachineAccount Vue d'ensemble NewMachineAccount.exe est un outil exe autonome simple pour créer de nouveaux comptes machine avec un mot de passe personnalisé dans un domaine spécifié. Utilisation NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Paramètr...