Teable 1.10.0 Attachment Write Path Traversal

Teable versions 1.10.0 and earlier contain an attachment signature path traversal vulnerability that allows an authenticated user to write or overwrite files outside the local storage directory with backend-process privileges. https://packetstorm.news/download/236363...

HPE Compute Scale-up Server 3200 platform input validation error vulnerability

A input validation error vulnerability exists in HPE Compute Scale-up Server 3200 versions prior to 1.77.30, HPE Compute Scale-up Server 3250 versions prior to 1.03.38, and HPE Superdome Flex server versions prior to 4.17.03. This vulnerability can be exploited remotely to list and modify the RMC...

Palo Alto Networks PAN-OS GlobalProtect Command Injection

Palo Alto Networks PAN-OS GlobalProtect configurations contain an unauthenticated command injection vulnerability that can result in arbitrary file creation and root-level code execution...

PT-2026-117442

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move uploaded file of the file home.php. The manipulation of the argument my img leads to unrestricted upload. Remote exploitation of the attack is...

RHEL 9 : gegl04 (RHSA-2026:85254)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:85254 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...

CVE-2025-55654

A use-after-free vulnerability exists in the gf_filter_pid_get_packet function (located in filter_core/filter_pid.c ) of GPAC MP4Box v2.4 . An attacker can exploit this flaw by providing a crafted file to cause a Denial of Service (DoS) . No specific remediation or exploit links are provided in t...

PT-2026-118019

Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor in github.com/corazawaf/coraza...

PT-2026-133139

Modify the spec file to include a %check section with the tests, fix a failing test in test io.py...

PT-2026-132902

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart...

CVE-2026-107188: Unrestricted Upload of File with Dangerous Type

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...

CVE-2026-111053: Improper Limitation of a Pathname to a Restricted Directory

FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/guest/system/templateexists endpoint permits path traversal because templateExists uses Path::join on the attacker-controlled file parameter without rejecting .. sequences or...

CVE-2026-111066: Uncontrolled Resource Consumption

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file descriptors. An unauthenticated attacker can consequently exhaust file descriptors with specially crafted multipart...

CVE-2025-55667

A segmentation violation in the dumpisomsaps function /mp4box/filedump.c of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-52290

A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows an attacker to cause a Denial of Service (DoS) . The vulnerability is triggered by processing a crafted media file , which leads to an unexpected application crash. No speci...

CVE-2026-108120: Path Traversal: 'dir\..\..\filename'

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to exfiltration of files located outside the...

Wazuh delete_rule_file delete_decoder_file file deletion

The vulnerability of the deleterulefile and deletedecoderfile functions of the Wazuh security monitoring and threat detection platform is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to delete any...

Wazuh get_lists() delete_list_file File Deletion

The vulnerability of the getlists and deletelistfile functions of the Wazuh security monitoring and threat detection platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to delete any files they...

CVE-2025-60480

A heap buffer overflow in the gfodfac4cfgalternativeinfo function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

CVE-2026-112282: Out-of-bounds Read

VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpiaccesspoint that allows attackers to crash applications by supplying a ClipInfo file with an empty EP-map fine table. Attackers can place a crafted .clpi file in BDMV/CLIPINF with numepfine set to zero and an...

ALSA-2026:85239 Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...