120741 matches found
CVE-2026-77621
Vector , a high-performance observability data pipeline, is vulnerable to arbitrary file write via its file sink in versions 0.10.0 through 0.57.0 . The file sink renders its output path from a template that accepts event fields; when an untrusted source supplies a field containing an absolute pa...
CVE-2026-77621 Vector: Arbitrary file write in the file sink via templated path (path traversal).
Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value...
CVE-2026-77621 Vector: Arbitrary file write in the file sink via templated path (path traversal).
Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink renders its templated path from event fields and opens the result without confining it to an intended directory. When an untrusted source supplies an event field used by the path template, the value...
Vitejs-exploit
Vite Exploit CVE-2025-31125 Descripción: Explota el path traversal en el endpoint @fs del servidor de desarrollo de Vite CVE-2025-31125 para acceder a archivos sensibles como /etc/passwd y /etc/hosts mediante URLs manipuladas. Creado por Muhammad Waseem. Uso: python viteexploit.py -u...
CVE-2026-95701
In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...
CVE-2026-95698
The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...
Vulnerability-CVE-2025-64446-CVE-2025-58034
FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...
Security Bulletin: extract-zip-2.0.1.tgz (Publicly disclosed vulnerability found by Scanner)
Summary extract-zip through 2.0.1 only checks the parent directory of each archive entry, allowing a symlink-then-regular-file pair with identical names to write through the planted symlink and achieve arbitrary file write outside the destination directory. CVSS: 8.1 High, CWE-22. Vulnerability...
CVE-2019-3396
CVE-2019-3396 CVE-2019-3396 confluence SSTI RCE 🔎 ¿Qué es CVE-2019-3396? Un error crítico de Confluence Atlassian. Tipo: Inyección de Plantillas + Path Traversal. Riesgo: Ejecución Remota de Código RCE sin inicio de sesión. Estado: Explotado activamente. 🛑 Versiones Afectadas 6.6.0 → 6.6.11 ❌...
Security Bulletin: extract-zip-2.0.1.tgz (Publicly disclosed vulnerability found by Scanner)
Summary extract-zip 2.0.1 does not validate symlink targets during zip extraction, allowing a malicious archive with relative symlink paths to read or write arbitrary files outside the extraction directory. CVSS: 8.1 High, CWE-22. Vulnerability Details CVEID:CVE-2026-56876 DESCRIPTION: extract-zi...
EUVD-2026-84496
In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...
CVE-2026-95701
MISP contains a path traversal weakness in the __statisticsOrgs method of UsersController.php, where an attacker-influenced organization name is concatenated directly into a file-system path used by file_exists() to check for a logo image. An authenticated user with the ability to create or renam...
EUVD-2026-84173
@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory...
@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
Summary The vaultbatch MCP tool and the equivalent POST /batch-to-vault HTTP endpoint accepted a caller-supplied vaultdir path that was passed directly to path.resolve + fs.mkdir with no containment check. A caller — or a prompt-injected LLM driving the MCP — could therefore create directories an...
EUVD-2026-84495
The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...
CVE-2026-95698 MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name
The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...
CVE-2026-95698
MISP's OrgImgHelper::findOrgImage method builds a filesystem path by concatenating a user-supplied organization name (settable via event import) with a fixed image directory and extension, then calls file_exists() on the result. Because no validation is performed before path construction, an atta...
CVE-2026-43637-cornac
CVE-2026-43637: Path Traversal Tar Slip in Cornac via extractarchive Severity: High, CVSS 4.0 8.8 , Critical, CVSS 3.1 9.1assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N Vector v4.0: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected:...
CVE-2026-65125
The NVIDIA Infrastructure Controller for Linux is vulnerable to a flaw where an attacker could cause external control of a file name or path (CWE-73). Successful exploitation of this vulnerability could result in code execution , escalation of privileges , data tampering , and denial of service ....