Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal allowing authorization bypass in the checkPrivate and WithRemote middleware in cmd/serve/restic/restic.go, where checkPrivate authorizes on the routed userID segment while WithRemote builds the backend object key fro...

PT-2026-60310

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.32.1 through 0.40.5 Description An issue exists where nvm ls-remote and other commands that refresh remote LTS aliases, such as nvm install --lts, parse the node.js mirror's index.tab and use the LTS codenam...

PT-2026-60534

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25 Description A heap-based buffer overflow occurs in the build inherited id function within libntfs-3g/security.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by creating a file within ...

PT-2026-60524

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25 Description A heap buffer overflow occurs in the ntfs ir to ib function within index.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by using a specially crafted NTFS image. This issue...

PT-2026-60263

Name of the Vulnerable Software and Affected Versions Apache Ivy versions 2.0.0 through 2.5.3 Description The PackagerResolver in Apache Ivy allows the downloading and repackaging of online artifacts based on a packager.xml file. This process uses an Ant script stored in a subdirectory of the...

The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to overflow of a buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted data...

Oracle Linux 10 : tomcat (ELSA-2026-19054)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19054 advisory. - Resolves: RHEL-150719 Certificate revocation bypass due to improper OCSP response validation CVE-2026-24734 - Resolves: RHEL-124493 tomcat: Directory...

Linux Distros Unpatched Vulnerability : CVE-2026-15392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolut...

PT-2026-60528

Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25 Description A heap buffer overflow occurs in the ntfs ib copy tail function within libntfs-3g/index.c. An attacker can corrupt heap memory in the SUID-root ntfs-3g binary by using a specially crafted NTFS...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1264:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1264:01 advisory. 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND CVE-2026-11610 389-ds-base: 389-ds-base: integer overflow in SAS...

PT-2026-60163

Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description A flaw exists in the pam winbind module of samba. When the mkhomedir feature is enabled, pam winbind changes the ownership of the target account's home directory without verifying if the path i...

Debian dla-4684 : opam - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4684 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4684-1 [email protected] https://www.debian.org/lts/security/...

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow attackers to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-39244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field. In zipEntry.js line 103,...

Exploit for CVE-2026-50338

CVE-2026-50338 Spring Cloud Azure B2C Resource Server Cross-I...

CVE-2026-53486

The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files and links outside the target directory. When extracting an archive to a directory, a crafted archive can read or write files outside that directory because hardlink and symlink...

CVE-2026-48338

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-48319 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code...

GHSA-HGJX-R89M-M7V4 FacturaScripts: Path traversal in UploadedFile::move() via getClientOriginalName() — arbitrary file write outside MyFiles/ leading to RCE

Summary FacturaScripts\Core\UploadedFile::move$destiny, $destinyName concatenates $destiny and $destinyName without normalizing the resulting path. Every caller in the codebase passes UploadedFile::getClientOriginalName — the unsanitized client-supplied filename — as $destinyName, so an...

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for July 2026, which includes 622 vulnerabilities affecting a range of products, including 57 that Microsoft marked as "critical." Microsoft notes that two of the vulnerabilities disclosed this month have been exploited in the wild. CVE-2026-5615...