69738 matches found
PT-2026-128279
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of...
CVE-2026-103407: Juniper Networks: An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks…
An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the...
WordPress WP01 2.6.2 Arbitrary File Download
WordPress WP01 plugin version 2.6.2 and earlier contains an unauthenticated arbitrary file download vulnerability that allows remote attackers to retrieve files from the server. https://packetstorm.news/download/238015...
Axel Download Accelerator Axel path traversal vulnerability
Axel Download Accelerator: Versions 2.17.14 and earlier of Axel contain a path traversal vulnerability. This vulnerability arises because after parsing a URL and extracting the filename, the output filename is URL percent decoded via httpdecode. Attackers can insert sequences such as %2e%2e%2f in...
Pie Register Premium arbitrary file upload vulnerability
Versions 3.8.4.0 and earlier of Pie Register Premium contain an arbitrary file upload vulnerability. This vulnerability arises because the pieregfileupload function fails to validate calls to file type checks, and the AJAX handler lacks nonce validation or permission checks. As a result,...
WordPress IvyForms arbitrary file upload vulnerability
WordPress IvyForms versions 1.5.1 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from insufficient file type validation in the filterFiletypeAndExt function; it lacks a list of prohibited extensions and overrides WordPress’s built-in MIME and extension...
Rocky Linux 10.2 [CIQ] Security Update: flatpak / flatpak-debuginfo / flatpak-debugsource / flatpak-devel / etc Multiple Vulnerabilities (crlsa-2026_89849)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689849 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...
VulnCheck KEV: CVE-2026-103688
The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that...
Link following vulnerability allows arbitrary file read
When renaming an item, Jenkins moves its directory on the controller file system, or copies it if it cannot be moved. Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed. This allows attackers with Item/Create and...
Race condition in artifact extraction allows arbitrary file creation
To prevent writing files outside the target directory, Jenkins refuses to write files through symbolic links when extracting archived artifacts on the controller. Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its...
VulnCheck KEV: CVE-2026-85688
TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requests to the /api/designer/v1/file-content endpoints to read arbitrary files or write malicious content to system path...
PT-2026-127801
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the upload image function. This is due to insufficient file type validation in upload image due to a weak Content-Ty...
PT-2026-130589
Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites. The module does not sufficiently validate file sources and destinations during content imports. An attacker can write arbitrary files, disclose sensitive local files accessible to the...
Linux Distros Unpatched Vulnerability : CVE-2026-118177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations...
PT-2026-128303
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with Item/Create and Item/Configure permission to read arbitrary files on the Jenkins controller file system...
CVE-2026-117615: Undefined Security Weakness
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with Item/Create and Item/Configure permission to read arbitrary files on the Jenkins controller file system...
Linux Distros Unpatched Vulnerability : CVE-2025-71437
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution sdist tar extraction that allows a specially crafted sequence of symlinks...
PT-2026-129175
Name of the Vulnerable Software and Affected Versions Echo versions prior to 4.15.3 Echo versions prior to 5.2.0 Description The middleware.Static component double-unescapes URL paths. Because Go's net/http already decodes Request.URL.Path, the static middleware unconditionally calling...
PT-2026-127862
The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. This is due to insufficient file type validation due to the absence of a dangerous-extension denylist in the...