CVE-2026-95698

MISP's OrgImgHelper::findOrgImage method builds a filesystem path by concatenating a user-supplied organization name (settable via event import) with a fixed image directory and extension, then calls file_exists() on the result. Because no validation is performed before path construction, an atta...

CVE-2026-65125

The NVIDIA Infrastructure Controller for Linux is vulnerable to a flaw where an attacker could cause external control of a file name or path (CWE-73). A successful exploitation of this vulnerability could result in code execution , escalation of privileges , data tampering , and denial of service...

WordPress Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion vulnerability

Authenticated Shop Manager+ Path Traversal to File Deletion vulnerability discovered by Wordfence PRISM in WordPress Plugin CTX Feed versions = 6.6.43...

CVE-2026-95273

A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function staticcontent of the file changedetectionio/flaskapp.py of the component visualselectordata. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch...

CVE-2026-95272

A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...

CVE-2026-93616

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-71557

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

EUVD-2026-84375

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...

CVE-2026-93616

A pre-authentication directory traversal vulnerability exists in the Check Point Management Web Service , affecting Check Point Security Management and Log Servers. This flaw allows unauthenticated attackers to upload and execute arbitrary scripts, potentially leading to remote code execution . A...

CVE-2026-95273

dgtlmoon changedetection.io (up to version 0.60.7 ) is affected by a path traversal vulnerability in the static_content function of changedetectionio/flask_app.py, specifically within the visual_selector_data component. By manipulating the filename argument, a remote attacker with low privileges ...

EUVD-2026-84370

A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function staticcontent of the file changedetectionio/flaskapp.py of the component visualselectordata. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch...

CVE-2026-95272 dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal

A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...

CVE-2026-95272

CVE-2026-95272 affects dgtlmoon changedetection.io up to version 0.60.7 , specifically the static_content function in changedetectionio/flask_app.py within the Screenshot Handler component. Manipulation of the filename argument enables a path traversal vulnerability, allowing remote attackers wit...

EUVD-2026-84365

A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...

ROOT-APP-PYPI-GHSA-HMQ2-W58F-27JC GHSA-hmq2-w58f-27jc in GitPython - Patched by Root

Root has patched GHSA-hmq2-w58f-27jc in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-4GMW-GG2M-W46P GHSA-4gmw-gg2m-w46p in GitPython - Patched by Root

Root has patched GHSA-4gmw-gg2m-w46p in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-9RJ7-RF2P-W77R GHSA-9rj7-rf2p-w77r in GitPython - Patched by Root

Root has patched GHSA-9rj7-rf2p-w77r in the GitPython package for Root:PyPI. Multiple fixed versions available...

CVE-2026-15095

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the 'provider' parameter. This makes it possible for authenticated attackers, with shop...