113 matches found
RHCOS 3 : OpenShift Container Platform 3.11.569 (RHSA-2021:4827)
The remote Red Hat Enterprise Linux CoreOS 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4827 advisory. - jenkins: FilePathmkdirs does not check permission to create parent directories CVE-2021-21685 - jenkins: File path filters do not...
CVE-2026-6262
CVE-2026-6262 affects the Betheme theme for WordPress. The vulnerability arises in the upload_icons() workflow which uses a user-controlled path (mfn-icon-upload) in a filesystem move, not restricting to the uploads directory, enabling arbitrary file deletion via path traversal. Affected: Betheme...
CVE-2026-22070
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal...
CVE-2026-22070
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal...
EUVD-2026-26354
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal...
PT-2026-36082
Name of the Vulnerable Software and Affected Versions ColorOS Assistant affected versions not specified Description An unauthenticated start-download channel allows for file path traversal, which is a technique used to access files and directories that are stored outside the intended folder...
CVE-2026-5998
A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects the function dispatch of the file agent/memory/service.py of the component API Memory Content Endpoint. This manipulation of the argument filename causes path traversal. The attack can be initiated remotely. Th...
Directory Traversal
Overview @actual-app/sync-server is an actual syncing server Affected versions of this package are vulnerable to Directory Traversal in the POST /sync/upload-user-file endpoint due to improper validation of the x-actual-file-id header. An attacker can write files outside the intended directory by...
📄 JUNG Smart Panel 5.1 KNX (L1.12.22) Path Traversal
JUNG Smart Panel version 5.1 KNX L1.12.22 unauthenticated path traversal proof of concept exploit that builds on the finding from LiquidWorm. ============================================================================================================================================= | Title : JUN...
TP-Link Tapo C260 安全漏洞
The TP-Link Tapo C260 is a surveillance camera produced by the TP-Link company. The TP-Link Tapo C260 v1 version has a security vulnerability, which stems from improper handling of specific GET request paths. This vulnerability may lead to unauthorized exploration of file system paths that have n...
CVE-2021-22028
In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user can read/write information from the file system using this vulnerability...
CVE-2021-22013
The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information...
CVE-2025-69194 Wget2: arbitrary file write via metalink path traversal in gnu wget2
A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially...
CVE-1999-0229
Denial of service in Windows NT IIS server using ..\...
EUVD-2018-12635
Malware in sbrugna...
EUVD-2025-29480
Malicious code in bioql PyPI...
EUVD-2021-9182
Malicious code in bioql PyPI...
EUVD-2021-9197
Malicious code in bioql PyPI...