CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22

CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...

CVE-2026-32813

creationtimestamp| type| source ---|---|--- 2026-03-15 09:48:43+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-3x67-4c2c-w45m 2026-03-22 04:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmr6y6qgz2u 2026-03-24...

CVE-2026-32933

creationtimestamp| type| source ---|---|--- 2026-03-13 15:35:18+00:00| published-proof-of-concept| https://github.com/LuckyPennySoftware/AutoMapper/security/advisories/GHSA-rvv3-g6hj-g44x 2026-03-22 00:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmaikzdtv2v...

CVE-2026-32313

creationtimestamp| type| source ---|---|--- 2026-03-13 10:49:25+00:00| published-proof-of-concept| https://github.com/robrichards/xmlseclibs/security/advisories/GHSA-4v26-v6cg-g6f9 2026-03-22 03:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhmkiyub4v2h...

CVE-2019-25537

creationtimestamp| type| source ---|---|--- 2026-03-12 17:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mguw24e2bf2e...

CVE-2026-32308

creationtimestamp| type| source ---|---|--- 2026-03-12 08:27:37+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-wvh5-6vjm-23qh 2026-03-12 22:35:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvhjztzdd2d 2026-03-18 06:00:14+00:0...

CVE-2025-54659: Improper Limitation of a Pathname to a Restricted Directory

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiSOAR Agent Communication Bridge 1.0 all versions may allow an unauthenticated attacker to read files accessible to the...

CVE-2026-23907: Improper Limitation of a Pathname to a Restricted Directory

This issue affects the ExtractEmbeddedFiles example in Apache PDFBox: from 2.0.24 through 2.0.35, from 3.0.0 through 3.0.6. The ExtractEmbeddedFiles example contains a path traversal vulnerability CWE-22 because the filename that is obtained from PDComplexFileSpecification.getFilename is appended...

CVE-2025-70028: Improper Limitation of a Pathname to a Restricted Directory

An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4...

📄 basic-ftp downloadToDir() Path Traversal

basic-ftp versions prior to 5.2.0 suffer from a path traversal vulnerability in downloadToDir. ============================================================================================================================================= | Title : basic-ftp prior to version 5.2.0 Path Traversal in...

CVE-2026-27699: Improper Limitation of a Pathname to a Restricted Directory

The basic-ftp FTP client library for Node.js contains a path traversal vulnerability CWE-22 in versions prior to 5.2.0 in the downloadToDir method. A malicious FTP server can send directory listings with filenames containing path traversal sequences ../ that cause files to be written outside the...

CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22

CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22. A patched version of the package is available...

CVE-2026-26158 affecting package busybox for versions less than 1.36.1-22

CVE-2026-26158 affecting package busybox for versions less than 1.36.1-22. A patched version of the package is available...

CVE-2019-25439

creationtimestamp| type| source ---|---|--- 2026-02-22 16:24:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfhkf3qe6c27...

CVE-2019-25433

creationtimestamp| type| source ---|---|--- 2026-02-22 16:22:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfhkcmkgvv2h...

CVE-2019-25366

creationtimestamp| type| source ---|---|--- 2026-02-22 16:21:10+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfhk7gxlwo2h...

CVE-2025-15579

creationtimestamp| type| source ---|---|--- 2026-02-22 04:49:15+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mfgdk6mves26...

CVE-2026-2896

creationtimestamp| type| source ---|---|--- 2026-02-22 04:34:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfgcqlespt2b 2026-02-24 18:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfmrs2dnbe2a...

AZL-77610 CVE-2026-26157 affecting package busybox for versions less than 1.36.1-22

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentiall...

AZL-77613 CVE-2026-26158 affecting package busybox for versions less than 1.36.1-22

A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unvalidated hardlink or symlink entries. If the tar archive is extracted with elevated privileges, this flaw can lead to...