PT-2026-107864

A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration CI system to process a crafted build manifest. By specifying local file Uniform Resource Identifiers URIs within source download definitions, t...

PT-2026-108189

Name of the Vulnerable Software and Affected Versions Tenable Identity Exposure SaaS affected versions not specified Description A command injection flaw exists in the Active Directory Events Listener. This allows an authenticated attacker with low privileges to execute arbitrary commands with...

Linux Distros Unpatched Vulnerability : CVE-2026-107466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration CI...

PT-2026-108308

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description On Windows, the Root.Mkdir and Root.MkdirAll functions can create a directory at a junction target that is located outside the root, provided the junction points...

ReconHound

ReconHound ReconHound is a Python-based web reconnaissance tool built for penetration testers, bug bounty hunters, and ethical hackers. It helps identify hidden paths, files, subdomains, query parameters, virtual hosts, and fuzzable endpoints — making it a versatile solution for deep web...

CVE-2026-105816

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2007-4559-lab

CVE-2007-4559 — TarSlip: The 15-Year Directory Traversal Educational use only. This lab intentionally exploits file system vulnerabilities inside isolated Docker containers. Do not run on any system with sensitive data or in production environments. A self-contained Docker lab that demonstrates...

EUVD-2026-94629

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...

CVE-2026-76277 Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...

EUVD-2026-93868

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user...

CVE-2026-46572

A flaw was found in ntfs-3g. This vulnerability allows a local attacker to achieve privilege escalation or cause a denial of service DoS by corrupting system memory. By providing a specially crafted NTFS filesystem image and creating a file within a malicious directory, an attacker can trigger a...

CVE-2026-42617

A flaw was found in NTFS-3G. A heap-based buffer overflow occurs when expanding a directory on a specially crafted NTFS filesystem image, such as during file creation. A local attacker can exploit this vulnerability to corrupt memory within the privileged binary, potentially leading to arbitrary...

CVE-2026-107215

The Excelize Go library (versions 2.3.1 to 2.11.0 ) is vulnerable to a remote panic or Out-of-Memory (OOM) Denial of Service due to improper validation of CFB directory-entry sizes. The extractPart function trusts the streamSize for EncryptionInfo and EncryptedPackage allocations before validatin...

CVE-2026-107215 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

CVE-2026-107215 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

WordPress Super Forms plugin <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter vulnerability

Unauthenticated Arbitrary Directory Deletion via 'data...filessubdir' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

CVE-2026-50181

CVE-2026-50181 Langroid path traversal in file tools allowed read/write outside the configured current directory. Primary advisory: GHSA-fg23-3346-88f5 GitHub advisory database: github.com/advisories/GHSA-fg23-3346-88f5 Researcher credit: @chaitanyagarware At a Glance Field| Value ---|--- CVE|...

GHSA-VHHQ-M2GM-RWC9 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Summary During an SSG build, page definitions returned by getSsgPages can provide custom dir and filename values. The builder joined those values to build.distDir and wrote the generated page without verifying that the final destination remained inside the distribution directory. Details A page...

EUVD-2026-93568

Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile...

CVE-2026-101886

Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 are vulnerable to a path traversal vulnerability. The flaw exists because the exported crosslaunch.share activity uses an unsanitized display name from a ContentProvider during file path construction. A malicious application ...