Gopass path traversal vulnerability

Versions of Gopass prior to 1.17.0 contain a path traversal vulnerability. This vulnerability stems from improper handling of paths in the file system backend. Attackers can exploit the ../ entries in Prune and IsDir to gain write access to shared Git sync storage, thereby creating specially...

Jenkins security vulnerabilities

Security vulnerabilities exist in Jenkins versions 2.587 and earlier, as well as LTS 2.580.1 and earlier. These vulnerabilities arise from following symbolic links when copying and renaming project directories, potentially allowing attackers with Item/Create and Item/Configure permissions to read...

LabStack Echo input validation error vulnerability

Versions of LabStack Echo prior to 4.16.0 and from 5.0.0 up to 5.4.0 contain a security vulnerability. This vulnerability arises because the globally mounted middleware.Static instance fails to align its parsing of encoded request paths with those of the Echo router. The router still matches...

Tactis NoviGest Desktop App input validation error vulnerability

The Tactis NoviGest Desktop App versions prior to 8.0.0-300 contain an input validation error vulnerability. This vulnerability arises because the SAFT import functionality fails to properly disable external entity resolution when processing XML files controlled by users via JAXB Unmarshaller. As...

CVE-2026-112375: Missing Authorization

An authenticated Kafka principal with no authorization grants not even ALTERCONFIGS can make a broker read a file or an environment variable from the broker host and return its contents. An IncrementalAlterConfigs or AlterConfigs request targeting a BROKER resource reaches the broker's...

WordPress Affiliate Toolkit arbitrary file upload vulnerability

WordPress Affiliate Toolkit versions 3.9.2 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from insufficient validation of file types in the uploadimage function, weak checks on Content-Type prefixes, and the derivation of file extensions from URL paths...

C97net qEngine CMS arbitrary file upload vulnerability

C97net qEngine CMS versions 6.0.0 and earlier, Kemana Directory versions 1.5.6 and earlier, and Cart Engine versions 3.0.0 and earlier contain an arbitrary file upload vulnerability. This vulnerability arises from unrestricted file uploads in the image management field; users with edit permission...

Kleor Contact Manager arbitrary file upload vulnerability

Kleor Contact Manager versions 9.1.2 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from an incomplete blacklist of file extensions in the addmessage function; the trailing dot causes the extension extraction to return an empty string. Additionally,...

WordPress Bit Flows code injection vulnerability

WordPress Bit Flows versions 1.31.0 and earlier contain a code injection vulnerability. This vulnerability stems from improper handling of local file inclusion for the image parameter the body field referenced by the mix tag in the ImageHelper node. It may allow unauthenticated attackers to inclu...

Apache Commons Digester 3.2 XML Injection

Apache Commons Digester version 3.2 contains an XML external entity vulnerability that may lead to local file disclosure, server-side request forgery, or entity-expansion denial of service when untrusted XML is parsed. Apache Commons Digester 3.2 XXE Vulnerability Vendor: The Apache Software...

MiracleLinux 9 : flatpak-1.12.9-4.el9_8.6 (AXSA:2026-2177:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2177:08 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitra...

Rocky Linux 9 [CIQ] Security Update: flatpak / flatpak-debuginfo / flatpak-debugsource / flatpak-devel / etc Multiple Vulnerabilities (crlsa-2026_89850)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689850 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary wri...

Rocky Linux 9 [CIQ] Security Update: lrzsz / lrzsz-debuginfo / lrzsz-debugsource Multiple Vulnerabilities (crlsa-2026_89755)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689755 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via crafte...

Pretix security vulnerability

Versions prior to pretix 2026.6.4, versions 2026.7.0 through 2026.7.3, and versions 2026.8.0 through 2026.8.1 contain a security vulnerability. This vulnerability arises from improper functioning of the mechanism that binds files generated during the shredding process to authentication methods...

PT-2026-129212

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 8.1.0 Description An unauthenticated installer endpoint install/checkConfiguration.php fails to escape request parameters, such as webSiteRootURL, when interpolating them into single-quoted PHP string literals to creat...

Linux Distros Unpatched Vulnerability : CVE-2026-118019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159 and Thunderbird 159. CVE-2026-118019 Note that Nessus...

MiracleLinux 9 : buildah-1.43.4-2.el9_8 (AXSA:2026-2187:09)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2187:09 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via craft...

MiracleLinux 9 : podman-5.8.2-8.el9_8 (AXSA:2026-2191:11)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2191:11 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Linux Distros Unpatched Vulnerability : CVE-2026-118178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then re...

Linux Distros Unpatched Vulnerability : CVE-2026-57202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...