108970 matches found
openssh: OpenSSH: sftp client allows attacker to control downloaded file location
A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...
AZL-106667 CVE-2026-105840 affecting package lrzsz 0.12.20-50
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...
CVE-2026-105834
Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...
EUVD-2026-93378
Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...
[SECURITY] [DLA 4825-1] suricata-update security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4825-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 06, 2026 https://wiki.debian.org/LTS -...
CVE-2025-8088
CVE-2025-8088 PoC Solo uso educativo Los detalles sobre este CVE se pueden encontrar en: https://nvd.nist.gov/vuln/detail/CVE-2025-8088 ⚠️ Advertencia: Este repositorio contiene una prueba de concepto PoC para CVE-2025-8088. Está destinado únicamente a fines educativos, de investigación y de...
CVE-2024-36991
CVE 2024-36991 Una vulnerabilidad de path-traversal que permite a un atacante leer archivos del sistema. Resumen Técnico CVE : 2024-36991 Path Traversal Sistemas Afectados : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 Aviso Legal Esta herramienta se proporciona únicamente para evaluaciones de segurid...
AZL-106269 CVE-2026-98215 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...
CVE-2026-98215
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vmfile with a backing file. For nested backing files overlayfs...
CVE-2026-41558 WordPress WP Migration Plugin DB & Files – WP Synchro plugin <= 1.16.1 - 2FA Bypass vulnerability
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro = 1.16.1 versions...
EUVD-2026-92957
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro = 1.16.1 versions...
CVE-2026-41558
The WP Synchro plugin (versions
CVE-2026-41558 WordPress WP Migration Plugin DB & Files – WP Synchro plugin <= 1.16.1 - 2FA Bypass vulnerability
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro = 1.16.1 versions...
CVE-2026-105762
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...
PT-2026-107262
Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated remote actor in the same AWS account to cause the environment of a user importing a Bedrock Agent to issue arbitrar...
PT-2026-107203
🚨 CVE-2026-79805 CVSS 9.8 Critical A path traversal flaw in HPE ClearPass Policy Manager allows remote attackers to read and overwrite sensitive OS files, leading to system compromise. https://t.co/AuVFW8JRTI https://t.co/jsTxIa6pL3...
The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.
The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux Distros Unpatched Vulnerability : CVE-2026-98215
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replac...
PT-2026-106544
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file security blob so it remains available after mmap replaces vma-vm file with a backing file. For nested backing files overlayf...