CVE-2026-18907 PathTravelsal Vulnerability in com.talpa.hibrowser

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...

CVE-2026-18907

The TECNO Hi Browser (com.talpa.hibrowser) version 2.23.1.1 on Android is vulnerable to a Path Traversal vulnerability (CWE-23) in its download file feature . The root cause is that the browser trusts an attacker-controlled Content-Disposition filename and fails to sanitize path separators or per...

CVE-2026-18907: Relative Path Traversal

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...

CVE-2021-36695

Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting XSS vulnerability in the download file feature on a manager profile due to lack of input validation...

PT-2021-21309

Name of the Vulnerable Software and Affected Versions Deskpro versions 2021.1.6 Description The issue is related to a cross-site scripting XSS vulnerability in the download file feature on a manager profile. This is due to a lack of input validation, allowing for potential exploitation...