118051 matches found
CVE-2026-93986
A flaw was found in rclone. This path traversal vulnerability allows a remote attacker to craft special names in server and third-party listing responses. These crafted names, containing directory traversal sequences, could potentially enable writing outside the intended destination directory...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561)
Summary Multiple vulnerabilities including path traversal and Denial of Service in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerabili...
cve-2026-87902-detection
wp-ghsa-7hp8-lab 検出ツールと再現可能なテストベンチ GHSA-7hp8-65ch-5whp / CVE-2026-87902 — page-template 解決における未認証パストラバーサルによる条件付き RCE （WordPress、CWE-98、CVSS 4.0：9.2）。 | ---|--- check/| リモートコントローラー、パッシブ、サーバーアクセス不要 detect/| IoC アナライザー + Sigma ルール offensive/| トレース生成器、実ログでの検出を検証するため docker-compose.yml + provision/|...
CVE-2026-91801
A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution...
CVE-2026-91797
Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened...
cve-2014-0130
== CVE-2014-0130 テストケース ペイロード : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === Netsparker 検出 : https://i.imgur.com/s1vahmj.png == HackerOne 1 - newrelic.com rails ディレクトリトラバーサル脆弱性 droidsec による - https://hackerone.com/reports/134032 == 参照 1...
CVE-2025-55182
CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 は、React の Flight Protocol における重大な RCE 脆弱性です。この攻撃は パストラバーサル + 偽のチャンク注入 + $B ハンドラの悪用 を連鎖させ、Functionattackercode を実行します。 ワーキングエクスプロイトチェーンを提供してくれたmaple3142...
EUVD-2026-85125
Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened...
CVE-2026-91797
Foxit PDF Editor/Reader is vulnerable to a directory traversal flaw because it fails to validate the directory traversal path in the attachment file name. This vulnerability allows malicious attachments to be written to directories outside the expected secure area when a PDF is opened. No specifi...
EUVD-2026-85121
A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution...
CVE-2026-91801
Foxit PDF Editor/Reader is susceptible to a path traversal vulnerability within its handling of embedded PDF resources , specifically involving RichMedia Annotations . The vulnerability is caused by insufficient validation of resource file paths , which may allow files to be written outside of th...
CVE-2026-91809
Foxit PDF Editor/Reader is susceptible to a use-after-free vulnerability during the handling of malformed PDF form fields. The root cause is improper validation during field-name traversal , which can lead the application to access a released object. This vulnerability can result in an applicatio...
EUVD-2026-85154
A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-name traversal may cause the application to access a released object, resulting in an application crash...
CVE-CVE-2025-25231
CVE-2025-25231 Nuclei テンプレート このテンプレートは、Nuclei ツール用に作成され、Omnissa Workspace ONE UEM 製品における CVE-2025-25231 二次的な Path Traversal の脆弱性を検出します。 脆弱性の説明 CVE-2025-25231 は、制限された API に操作された GET リクエストを送信することで、サーバー上の機密性の高い読み取り専用ファイルにアクセスできるようにする Path Traversal タイプの脆弱性です。この脆弱性により、設定ファイル、API...
CVE-2026-63445
A flaw was found in Perses, an open-source dashboard and visualization project. An authenticated attacker can exploit a vulnerability in list endpoints that use the file-system database. By manipulating the project query parameter with directory traversal characters, an attacker can read arbitrar...
CVE-2026-19438
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
CVE-2021-41773-L-
CVE-2021-41773 🐛 Apache HTTP Server 2.4.49 におけるパストラバーサルおよびファイル開示の脆弱性 Apache HTTP Server 2.4.49 のパス正規化に加えられた変更に欠陥が見つかりました。攻撃者はパストラバーサル攻撃を使用して、Alias 系ディレクティブで設定されたディレクトリの外部にあるファイルに URL をマッピングできる可能性があります。 これらのディレクトリ外のファイルが通常のデフォルト設定「require all...
Exploit for CVE-2026-87902
CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress getpagetem...
CVE-2026-19438 Mint Workbench I Path traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...