Linux Distros Unpatched Vulnerability : CVE-2025-71437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution sdist tar extraction that allows a specially crafted sequence of symlinks...

Linux Distros Unpatched Vulnerability : CVE-2026-116131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded...

CVE-2026-116131: Allocation of Resources Without Limits or Throttling

HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits the whole body on its separators at once, creating one scalar per separator before any field is stored. This costs about 9...

CVE-2026-59179: Improper Limitation of a Pathname to a Restricted Directory

OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, @openhop/server passes unauthenticated flow route parameters from GET /api/flows/:id and DELETE /api/flows/:id in packages/server/src/routes.ts to FlowStore.filePath in packages/server/src/store.ts without an identifie...

CVE-2026-118663: Double Decoding of the Same Data

@hono/node-server allows running the Hono application on Node.js. From 1.19.10 until 2.1.3, serveStatic decodes a request path a second time after Hono has already decoded it for routing, so a malformed percent-encoded sequence can make route middleware evaluate an encoded path while static file...

CVE-2026-118693: giuspen cherrytree: CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that…

CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::createimagefromxml that trusts unvalidated embedded-file 'filename' attributes in XML documents. Attackers can craft a .ctd, .ctz, or .ctx document with an absolute or / filename and no data, so saving embeds...

CVE-2026-118684: Project-MONAI MONAI: MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns…

MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in checkhash that silently returns True when hashval is None, with MD5 as the default hash type. Attackers performing man-in-the-middle or registry compromise can substitute bundles, datasets, or model archives...

VulnCheck KEV: CVE-2026-103688

The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that...

WordPress WP01 2.6.2 Arbitrary File Download

WordPress WP01 plugin version 2.6.2 and earlier contains an unauthenticated arbitrary file download vulnerability that allows remote attackers to retrieve files from the server. https://packetstorm.news/download/238015...

PT-2026-129144

n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy Files Selector pattern causing...

PT-2026-130601

S3 File System s3fs provides an additional file system to your Drupal site that stores files in Amazon's Simple Storage Service S3 storage. The module doesn't sufficiently isolate upload context between separate objectfile operations in the same request resulting in the potential for objects to b...

PT-2026-130589

Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites. The module does not sufficiently validate file sources and destinations during content imports. An attacker can write arbitrary files, disclose sensitive local files accessible to the...

CVE-2026-67073: HCL Software BigFix AEX: HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...

PT-2026-127801

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the upload image function. This is due to insufficient file type validation in upload image due to a weak Content-Ty...

Apache Commons Digester 3.2 XXE Vulnerability

Summary Apache Commons Digester is a Java library from the Apache Commons project that converts XML documents into trees of Java objects. Description Apache Commons Digester creates its SAX parser factory with no protections against document type definitions or external entities, and the default...

VulnCheck KEV: CVE-2026-85688

TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requests to the /api/designer/v1/file-content endpoints to read arbitrary files or write malicious content to system path...

Link following vulnerability allows arbitrary file read

When renaming an item, Jenkins moves its directory on the controller file system, or copies it if it cannot be moved. Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed. This allows attackers with Item/Create and...

Race condition in artifact extraction allows arbitrary file creation

To prevent writing files outside the target directory, Jenkins refuses to write files through symbolic links when extracting archived artifacts on the controller. Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its...

PT-2026-127779

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the upload file function in all versions up to, and including, 3.8.4 This makes it possible for authenticated attackers, with...

PT-2026-130603

Stage File Proxy is a general solution for getting production files on a development server on demand. It is not intended for usage on production sites. The module doesn't sufficiently check file URL for malicious content when attempting to do fallback retrieval leading to a cross-site scripting...