10397 matches found
CVE-2026-12339
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...
EUVD-2026-55700
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on t...
CVE-2026-49007
creationtimestamp| type| source ---|---|--- 2026-08-10 17:59:21+00:00| seen| https://gist.github.com/digitalgangst4r/e56a1a1494c1ac4d81a87fddc57a712a...
EUVD-2026-55652
OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the OpenCart v4.2.0.0 extension installer extracts these zip files, but does not validate that the extracted paths stay inside the intended extraction directory. An attacker can craft a malicious extensio...
kubectl cp path traversal on Windows allows arbitrary file writes
CVSS Rating: CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N - Medium 6.5 Description of vulnerability A path traversal vulnerability exists in the kubectl cp command when it is run on Windows. kubectl cp copies files between containers and the user machine. To copy files from a container, Kubernete...
github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction
A flaw was found in moby/go-archive. The tar extraction routines in the component do not properly restrict filesystem operations to the intended destination directory. An attacker who controls the contents of an archive can exploit this by including symbolic links, allowing them to create or...
PYSEC-2026-3632 Keras: DiskIOStore permits path traversal through crafted layer names
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the DiskIOStore.make method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths...
CVE-2026-72567
The CVE-2026-72567 entry concerns AsyncFuncAI/deepwiki-open. A path traversal flaw arises from improper validation in the wiki-cache API endpoint (api/api.py) which builds file paths from user-controlled owner, repo, and repo_type fields, allowing unauthenticated remote actors to write to or dele...
CVE-2026-72567 deepwiki-open - Unauthenticated Path Traversal Leading to Arbitrary File Write and Delete
An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The api/api.py wiki-cache endpoint constructs file paths from user-controlled owner, repo, and repotype...
PT-2026-69852
Name of the Vulnerable Software and Affected Versions OpenCart version 4.2.0.0 Description The extension installer fails to validate that extracted paths from uploaded .ocmod.zip files remain within the intended directory. This allows an attacker to use directory traversal sequences, such as ../,...
CVE-2026-12339: Improper Limitation of a Pathname to a Restricted Directory
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...
CVE-2026-72567: Improper Limitation of a Pathname to a Restricted Directory
An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The api/api.py wiki-cache endpoint constructs file paths from user-controlled owner, repo, and repotype...
CVE-2026-18412: Undefined Security Weakness
OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the OpenCart v4.2.0.0 extension installer extracts these zip files, but does not validate that the extracted paths stay inside the intended extraction directory. An attacker can craft a malicious extensio...
PT-2026-69972
Name of the Vulnerable Software and Affected Versions Tabby versions prior to 1.0.235 Description A malicious SFTP server can return a backslash traversal filename through the entry.name variable. The SFTPSession.readdir and makeFile functions in tabby-ssh/src/session/sftp.ts use POSIX path...
PT-2026-69451
Name of the Vulnerable Software and Affected Versions AsyncFuncAI/deepwiki-open versions prior to commit 16f35a0 Description Improper path validation allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The 'api/api.py' wiki-cache endpoint constructs...
The vulnerability of the config_dirs directive in the NGINX Agent daemon and the NGINX Instance Manager automation platform allows a malicious actor to gain unauthorized access to read and write arbitrary files.
The vulnerability of the configdirs directive in the NGINX Agent and the NGINX Instance Manager automation platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to read and write arbitrary...
CVE-2026-73030: Improper Limitation of a Pathname to a Restricted Directory
unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the iswithindirectory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks. Attackers can supply malicious tar archives with symlink membe...
PT-2026-69945
Name of the Vulnerable Software and Affected Versions unearth versions prior to 0.18.2 Description A path traversal issue exists in the is within directory function, which fails to normalize paths before validation. This allows ../ sequences to bypass directory containment checks. An attacker can...
PT-2026-99858
Name of the Vulnerable Software and Affected Versions kubectl affected versions not specified Description A path traversal issue exists in the kubectl cp command for clients running on Windows. When copying files from a container, the client executes the tar binary within the container to create ...
Photon OS 5.0: Python3 PHSA-2023-5.0-91-0139
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0139. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...