Lucene search
+L

1457 matches found

OSV
OSV
added 2026/02/19 10:6 p.m.7 views

GHSA-4685-C5CP-VP95 OpenClaw safeBins stdin-only bypass via sort output and recursive grep flags

Summary tools.exec.safeBins could be bypassed for filesystem access when sort output flags -o / --output or recursive grep flags were allowed through safe-bin execution paths. Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.2.19 - Latest published version at triag...

3.6CVSS5.9AI score0.0014EPSS
SaveExploits0References5
OSV
OSV
added 2026/02/18 5:38 p.m.4 views

GHSA-GQ9C-WG68-GWJ2 OpenClaw has a path traversal in browser trace/download output paths may allow arbitrary file writes

Summary OpenClaw’s browser control API accepted user-supplied output paths for trace/download files without consistently constraining writes to OpenClaw-managed temporary directories. Impact If an attacker can access the browser control API, they could attempt to write trace/download output files...

8.7CVSS5.6AI score0.00425EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/02/18 12:57 a.m.24 views

Directory Traversal

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Directory Traversal via the handling of module paths in the gateway configuration. An attacker can execute arbitrary code by supplying a crafted module path to the configuration if they...

8.6CVSS6.7AI score0.00405EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/17 7:21 p.m.13 views

CVE-2025-59793

Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files. However, the application doesn't properly sanitize the jobDirectory parameter, which allows path traversal sequences to be included. This...

9.9CVSS0.01027EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/17 12:0 a.m.31 views

CVE-2025-59793

CVE-2025-59793 Details (MODE C) Rocket TRUfusion Enterprise (

9.9CVSS6.1AI score0.01027EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/17 12:0 a.m.33 views

CVE-2025-59793

Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files. However, the application doesn't properly sanitize the jobDirectory parameter, which allows path traversal sequences to be included. This...

0.01027EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/02/14 7:22 p.m.12 views

CVE-2026-21878

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...

7.5CVSS5.7AI score0.00356EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/02/14 1:26 a.m.8 views

CVE-2026-26225

Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated...

8.5CVSS5.7AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/13 7:17 p.m.7 views

CVE-2026-21878

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...

7.5CVSS0.00356EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/02/13 6:10 p.m.31 views

CVE-2026-21878 BACnet Stack Improperly Limits Pathnames to a Restricted Directory

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...

7.5CVSS0.00356EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/13 6:10 p.m.9 views

CVE-2026-21878 BACnet Stack Improperly Limits Pathnames to a Restricted Directory

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...

7.5CVSS5.7AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/13 6:10 p.m.6 views

CVE-2026-21878

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...

5.7AI score0.00356EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/13 12:0 a.m.8 views

PT-2026-8019

Name of the Vulnerable Software and Affected Versions BACnet Stack versions prior to 1.5.0.rc3 Description The BACnet Stack software contains a flaw in its file writing functionality. Specifically, there is a lack of validation for user-supplied file paths, which could allow attackers to write...

7.5CVSS5.6AI score0.00356EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2026/02/13 12:0 a.m.11 views

BACnet Stack 路径遍历漏洞

BACnet Stack is an open-source protocol stack for BACnet, suitable for embedded systems, Linux, MacOS, BSD, and Windows. Versions of BACnet Stack prior to 1.5.0.rc3 contained a path traversal vulnerability. This vulnerability stemmed from the lack of validation for the file writing function,...

7.5CVSS5.9AI score0.00356EPSS
SaveExploits1References2
NVD
NVD
added 2026/02/12 10:16 p.m.12 views

CVE-2026-26225

Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated...

8.5CVSS0.00181EPSS
SaveExploits0References5
NVD
NVD
added 2026/02/12 10:16 p.m.15 views

CVE-2026-26224

Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains a local privilege escalation vulnerability. A root-executed diagnostic script creates and writes files in /tmp without enforcing secure...

8.5CVSS0.0011EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.12 views

Intego Log Reporter 安全漏洞

Intego Log Reporter is a log collection and analysis tool developed by Intego. There is a security vulnerability in Intego Log Reporter. This vulnerability stems from diagnostic scripts executed with root privileges, which fail to enforce secure directory handling when creating and writing files ...

8.5CVSS6.9AI score0.0011EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/12 12:0 a.m.20 views

PT-2026-7916

Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation vulnerability. Backup task definitions are stored in a location writable by non-privileged users while being processed with elevated...

8.5CVSS5.7AI score0.00181EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.17 views

Infoblox NIOS 安全漏洞

Infoblox NIOS is a system developed by the American company Infoblox, used for managing and automating network devices and services. It is utilized to automate the configuration and management of networks, ensuring stable network operation. The Infoblox NIOS 9.0.7 and earlier versions have securi...

8.8CVSS5.9AI score0.00572EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/12 12:0 a.m.42 views

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

0.0026EPSS
SaveExploits0References2
Rows per page
Query Builder