PT-2026-128225

HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...

PT-2026-127862

The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. This is due to insufficient file type validation due to the absence of a dangerous-extension denylist in the...

PT-2026-128331

Ultralytics load dataset cache file Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target...

PT-2026-128337

Name of the Vulnerable Software and Affected Versions HTTP::Body versions prior to 1.23 01 Description An issue exists where the software allows memory and temporary file exhaustion due to an unlimited number of form fields and multipart parts. The urlencoded parser splits the entire body on its...

PT-2026-128213

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding http decode on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f URL-encoded ../ sequences in the URL path. These sequences survive the URL...

PT-2026-129175

Name of the Vulnerable Software and Affected Versions Echo versions prior to 4.15.3 Echo versions prior to 5.2.0 Description The middleware.Static component double-unescapes URL paths. Because Go's net/http already decodes Request.URL.Path, the static middleware unconditionally calling...

PT-2026-129196

CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper:: create image from xml that trusts unvalidated embedded-file 'filename' attributes in XML documents. Attackers can craft a .ctd, .ctz, or .ctx document with an absolute or / filename and no data, so saving...

Dell PowerProtect Data Domain path traversal vulnerability

Versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20 of Dell PowerProtect Data Domain contain a path traversal vulnerability. This vulnerability stems from improper restrictions on path names within restricted directories, potentially...

PT-2026-127792

Name of the Vulnerable Software and Affected Versions Pie Register Premium versions prior to 3.8.4.1 Description An unrestricted file type upload flaw exists in the piereg file upload function. The issue occurs because the plugin uses wp check filetype and wp check filetype and ext for validation...

Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274

Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites. The module does not sufficiently validate file sources and destinations during content imports. An attacker can write arbitrary files, disclose sensitive local files accessible to the...

VulnCheck KEV: CVE-2025-54988

Critical XXE in Apache Tika tika-parser-pdf-module in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be able to read sensitive data or trigger malicious requests to...

VulnCheck KEV: CVE-2026-73181

Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce 7.6 versions...

PT-2026-128130

In the Linux kernel, the following vulnerability has been resolved: cifs: don't update i size in cifs do truncate without a cached handle If find writable file returns null, cifs file flush will return 0 without issuing set file size, and the outer 'if !rc' block will set i size to 0 before telli...

Jenkins security vulnerabilities

Security vulnerabilities exist in Jenkins versions 2.587 and earlier, as well as LTS 2.580.1 and earlier. These vulnerabilities stem from improper handling of file paths attempting to perform path traversal within the file browser of workspaces and $JENKINSHOME/userContent/. Attackers with...

Jenkins security vulnerabilities

Security vulnerabilities exist in Jenkins versions 2.587 and earlier, as well as LTS 2.580.1 and earlier. These vulnerabilities arise from the fact that symbolic links in the file paths are only checked prior to creating parent directories; they are not checked before writing files. This allows...

HCL BigFix AEX permission and access control issue vulnerability

The HCL BigFix AEX v13.0.0.1 version contains a security vulnerability stemming from unrestricted file uploads and improper access controls. This vulnerability may allow attackers to upload malicious or unauthorized files, thereby gaining direct access to or downloading sensitive uploaded content...

Giuseppe Penone CherryTree path traversal vulnerability

Giuseppe Penone CherryTree versions 1.7.2 and earlier contain a path traversal vulnerability. This flaw arises because CtStorageXmlHelper::createimagefromxml fails to validate the filename attribute in XML documents containing embedded files. Attackers can craft .ctd, .ctz, or .ctx documents with...

C97net qEngine CMS code injection vulnerability

C97net qEngine CMS versions 6.0.0 and earlier, Kemana Directory versions 1.5.6 and earlier, and Cart Engine versions 3.0.0 and earlier contain a code injection vulnerability. This vulnerability stems from a local file inclusion flaw in the run parameter of admin/task.php. Authenticated...

CVE-2026-118039: Progress Software Telerik Document Processing Libraries: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference…

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...

CVE-2026-118654: Improper Limitation of a Pathname to a Restricted Directory

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after route matching and serve a file through a public static route even though the corresponding direct path is protected by route-level middleware. An unauthenticated attacker can read...