PT-2026-43627

Name of the Vulnerable Software and Affected Versions tmp affected versions not specified Description The tmp npm package contains a path traversal issue that allows escaping the intended temporary directory when untrusted data is passed into the prefix, postfix, or dir options. By embedding...

GHSA-F9F8-RM49-7JV2

creationtimestamp| type| source ---|---|--- 2026-05-25 18:03:54+00:00| seen| https://bsky.app/profile/winsontang.com/post/3mmp2tsdeu62f...

CVE-2026-33712

creationtimestamp| type| source ---|---|--- 2026-05-25 17:00:04+00:00| seen| https://t.me/GithubRedTeam/85856 2026-05-25 19:00:11+00:00| seen| Telegram/u353QQC82id8CE3exVt8JuaCPTA2e4vaac9ku63kUT5lYfk 2026-05-25 21:00:04+00:00| seen| Telegram/DE8V0W55Lks0xFUNDp9UGyNB0T-CRSwfpeIrdYc5V2Tnj4...

CVE-2026-9472 dazeb markdown-downloader index.ts create_subdirectory path traversal

A flaw has been found in dazeb markdown-downloader up to 3d4394b34b6c99d81af817623af55e3384df5a6a. Affected is the function downloadmarkdown/listdownloadedfiles/createsubdirectory of the file src/index.ts. Executing a manipulation can lead to path traversal. The attack can be launched remotely. T...

USN-8302-1: NLTK vulnerabilities

It was discovered that NLTK incorrectly validated file paths when opening files using the nltk.util module. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-0846 It was discovered that NLTK incorrectly validated file paths in multiple CorpusReader classes. An...

USN-8302-1 nltk vulnerabilities

It was discovered that NLTK incorrectly validated file paths when opening files using the nltk.util module. An attacker could possibly use this issue to obtain sensitive information. CVE-2026-0846 It was discovered that NLTK incorrectly validated file paths in multiple CorpusReader classes. An...

CVE-2018-25366

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortc...

CVE-2018-25378

Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field. Attackers can create a malicious text file containing 500 or more characters, paste the content into the New Noteboo...

EUVD-2018-21889

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortc...

CVE-2018-25366

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortc...

CVE-2018-25366 CuteFTP 5.0 XP Buffer Overflow via Site Manager Label Field

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortc...

GHSA-86QP-5C8J-P5MR

creationtimestamp| type| source ---|---|--- 2026-05-25 13:07:35+00:00| seen| https://gist.github.com/konard/1df63152a8fa23d9ee65875a3fd172e2 2026-05-28 19:29:34+00:00| seen| https://gist.github.com/lesnargitonga/ded68f9d3d270cc386fe7c2227970ebc 2026-06-04 13:40:58+00:00| seen|...

CVE-2026-9435

creationtimestamp| type| source ---|---|--- 2026-05-25 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116634748548269306 2026-05-25 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmobiyztm622 2026-06-22 03:46:46+00:00| seen|...

CVE-2026-38192

creationtimestamp| type| source ---|---|--- 2026-05-25 08:35:08+00:00| seen| https://gist.github.com/Echore61/a64f2a2ad7373ad91afee2a50316fecf 2026-09-02 01:00:13+00:00| seen| Telegram/I58s2uZmAQqrY0Sc2SLCSg9yo3yGDFMC-JsGWGbcm0eZ9o 2026-09-03 00:00:43+00:00| published-proof-of-concept|...

CVE-2026-48832

creationtimestamp| type| source ---|---|--- 2026-05-25 08:31:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116634281312673423...

PT-2026-43219

CuteFTP 5.0 XP contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by injecting malicious payload into the Site Manager label field. Attackers can craft a payload exceeding 520 bytes that overwrites the return address and executes shellcode when a shortc...

PT-2026-43087

A flaw has been found in dazeb markdown-downloader up to 3d4394b34b6c99d81af817623af55e3384df5a6a. Affected is the function download markdown/list downloaded files/create subdirectory of the file src/index.ts. Executing a manipulation can lead to path traversal. The attack can be launched remotel...

CVE-2026-9360

creationtimestamp| type| source ---|---|--- 2026-05-24 09:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmllz5x2pp2m...

CVE-2021-47968

Podcast Generator 3.1 is vulnerable to persistent cross-site scripting, allowing authenticated attackers to inject malicious scripts by submitting unfiltered JavaScript code in the longdescription parameter. Attackers can inject script tags through episode creation or editing requests to execute...

CVE-2026-47280

creationtimestamp| type| source ---|---|--- 2026-05-23 12:32:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116623895926855718 2026-05-27 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmu2bqqi4p2f 2026-06-17 21:03:12+00:00| seen|...