CVE-2026-115194

A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets can register any file that is readable by the web server...

EUVD-2026-109805

Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containing symlinks to wa-config/db.php or...

CVE-2026-116213 Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks

Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containing symlinks to wa-config/db.php or...

CVE-2026-116213 Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks

Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containing symlinks to wa-config/db.php or...

CVE-2026-116213 Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks

Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containing symlinks to wa-config/db.php or...

CVE-2026-116213

The Webasyst Framework (through version 4.4.0 ) is vulnerable to an arbitrary file read vulnerability within the waArchiveTar::writeItem() function. The root cause is a failure to validate link targets when creating symlinks from theme archives. An authenticated user with theme management rights ...

EUVD-2026-109798

A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets can register any file that is readable by the web server...

CVE-2026-115194

A path traversal vulnerability exists in the Mautic Asset API . When creating a local asset via the API, the application fails to restrict the supplied file path to the designated upload directory. An authenticated user with asset creation permissions can register any file readable by the web ser...

CVE-2026-115194

A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets can register any file that is readable by the web server...

CVE-2026-115194

A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets can register any file that is readable by the web server...

CVE-2026-115194

A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets can register any file that is readable by the web server...

CVE-2026-105947 Arbitrary File Read in Innotim Software's Logsign SIEM

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...

CVE-2026-105947 Arbitrary File Read in Innotim Software's Logsign SIEM

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...

CVE-2026-105947

Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM versions 6.4.120 before 6.4.122 are vulnerable to a Path Traversal vulnerability (CWE-22). This flaw allows an attacker to bypass intended directory restrictions to access files outside the restricted directory. The securi...

zeroexploit

zeroexploit Passive-first security research toolkit — by G...

Exploit for CVE-2026-106173

CVE-2026-106173 — FortiSIEM QueryResult gRPC Path-Traversal Fi...

Exploit for Path Traversal in Oracle Glassfish_Server

Work 1 — Secure REST API Development with CI/CD and Real CVE V...

podman: Arbitrary file write when importing OCI archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

Important: Red Hat Security Advisory: skopeo security update

An update for skopeo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

openssh: OpenSSH: sftp client allows attacker to control downloaded file location

A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...