CVE-2019-18426

Divulgación de vulnerabilidades de WhatsApp - Redirección abierta + Bypass de CSP + XSS persistente + permisos de lectura del FS + potencial para RCE CVE-2019-18426 Artículo técnico Documentos originales de divulgación de vulnerabilidades ¡Videos de demostración!...

CVE-2026-34689

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

EUVD-2026-84785

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-34689

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. This flaw could allow an attacker to perform an arbitrary file system read , gaining access to sensitive files and directories outside the intended access scope. Exploitatio...

CVE-2026-34689 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-34689: Improper Limitation of a Pathname to a Restricted Directory

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

APSB26-150 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass...

CVE-2026-81994

Adobe Acrobat Reader is affected by a Prototype Pollution (CWE-1321) vulnerability that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction —a victim must open a malicious...

EUVD-2026-74204

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

EUVD-2026-74070

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

CVE-2026-75998: Improper Access Control

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

PT-2026-88307

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

CVE-2026-81994: Improperly Controlled Modification of Object Prototype Attributes

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

PT-2026-88493

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

CVE-2026-49833: Improper Limitation of a Pathname to a Restricted Directory

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

CVE-2026-76198

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

CVE-2026-76198 CAI Content Credentials | Improper Input Validation (CWE-20)

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

CVE-2026-76198

CAI Content Credentials (Adobe) is affected by an Improper Input Validation flaw (CWE-20) that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction — a victim must open a m...

CVE-2026-76198: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

CVE-2026-48441

CVE-2026-48441 affects Lightroom Classic. The issue is an Improper Limitation of a Pathname to a Restricted Directory (path traversal) that could allow arbitrary file system reads. The root cause is a pathname handling flaw that improperly constrains access to restricted directories. Victims must...