CVE-2026-124014

XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote attackers to modify the system configuration file /etc/xwebconfig.json by sending a crafted POST request to config.lua with action=set, which performs no session validation and writes th...

Enlogic SCADA Virtual Controller Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

Enlogic SCADA Virtual Controller Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

CVE-2026-127050

Backup Migration before 2.1.8 for WordPress contains a path traversal vulnerability in its PclZip restore fallback that allows an attacker to achieve arbitrary file write when an administrator restores a malicious backup archive on a server lacking the PHP zip extension. Attackers can craft a zip...

CVE-2026-127050

Backup Migration before 2.1.8 for WordPress is vulnerable to a path traversal vulnerability within its PclZip restore fallback . This issue occurs on servers lacking the PHP zip extension; when an administrator restores a malicious backup archive, the PclZip extract() function processes entry nam...

CVE-2026-127050 Backup Migration before 2.1.8 Path Traversal via PclZip Restore Fallback

Backup Migration before 2.1.8 for WordPress contains a path traversal vulnerability in its PclZip restore fallback that allows an attacker to achieve arbitrary file write when an administrator restores a malicious backup archive on a server lacking the PHP zip extension. Attackers can craft a zip...

EUVD-2026-124371

Backup Migration before 2.1.8 for WordPress contains a path traversal vulnerability in its PclZip restore fallback that allows an attacker to achieve arbitrary file write when an administrator restores a malicious backup archive on a server lacking the PHP zip extension. Attackers can craft a zip...

CVE-2026-126644 Ansible.posix: authorized_key module follows a parent-directory symlink allowing writes outside the intended directory

A link-following flaw was found in the authorizedkey module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component os.chown with followsymlinks=False and ONOFOLLOW in safeopenwrite. When an unprivileged local user replaces their /.ss...

CVE-2026-126644

A link-following flaw exists in the authorized_key module of the ansible.posix collection. This vulnerability is residual to the fix for CVE-2026-11837 because the existing fix only guards the final path component. An unprivileged local user can replace their ~/.ssh directory with a symlink to a ...

openssh: OpenSSH: sftp client allows attacker to control downloaded file location

A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...

openssh: OpenSSH: sftp client allows attacker to control downloaded file location

A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...

CVE-2023-45878

CVE-2023-45878 GibbonEdu Gibbon Exploit version 25.0.1 GibbonEdu Gibbon version 25.0.1 and before GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write Read More https://nvd.nist.gov/vuln/detail/CVE-2023-45878 https://herolab.usd.de/security-advisories/usd-2023-0025/ Disclaimer...

ALPINE-CVE-2026-113408

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository...

CVE-2026-113408

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository...

CVE-2026-113408 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Git

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository...

CVE-2026-113408

A path traversal vulnerability exists in Git because a malicious server can advertise a malformed unborn HEAD reference during repository operations. This allows the client to perform unintended file writes during subsequent reference updates when cloning or committing to a malicious repository, ...

CVE-2026-113408

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository...

EUVD-2026-124323

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository...

CVE-2026-113408

Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository...

CVE-2026-55168

CVE-2026-55168 This repository contains a simple PoC for CVE-2026-55168 in Runtipi. The issue is an authenticated arbitrary file write that can be reached through the backup restore flow. A crafted backup archive can plant a symlink into restored application data, and a later normal config update...