CVE-2026-88069 Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...

The vulnerability of the django.utils.archive.extract() function in the Django web application framework allows a hacker to bypass security restrictions.

The vulnerability of the django.utils.archive.extract function in the Django web application framework is related to errors in the mechanism for handling relative pathnames to directories. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions from a remote...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability in Mattermost versions 10.5.5 and prior 10.5.x, 9.11.15 and prior 9.11.x, 10.8.0 and prior 10.8.x, 10.7.2 and prior 10.7.x, and 10.6.5 and prior 10.6.x, which stems from an...

PeaZip 安全漏洞

PeaZip is a free Zip software and Rar extractor from the individual developer Giorgio Tani. A security vulnerability exists in Giorgio Tani peazip version v.9.0.0, which originates from a denial of service that allows an attacker to cause a denial of service via the end-of-archive marking feature...