14977 matches found
CVE-2026-71283
Fledge's backup-restore upload handler, uploadbackup python/fledge/services/core/api/backuprestore.py, calls tarfile.extractalltemppath on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role @haspermission"admin"...
CVE-2026-71269
CVE-2026-71269 affects Node-RED versions 3.0.0 through 5.0.4 (running on Node.js ≥ 15). The local-filesystem library storage module (saveLibraryEntry in library.js) joins a user-supplied path via fspath.join(libDir, type, path) with no traversal sanitization. A bare .. segment passes the is_malic...
CVE-2026-71269
...
EUVD-2026-53353
OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses FILE:path content directives from uploaded Structured Text .st program files and writes the referenced content to os.path.join'./core', filepath with no validation that filepath stays within the ./core directory. A crafted ....
CVE-2026-71268 OpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading to Arbitrary File Write
OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...
CVE-2026-60009
In Eclipse Theia versions up to and including 1.73.1, the "@theia/filesystem" backend binds "POST /file-upload" in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart "uri" field and calls "fs.movetmp, target, overwrite: true " with no...
CVE-2026-60009
In Eclipse Theia up to 1.73.1, the backend @theia/filesystem binds POST /file-upload in every filesystem-enabled deployment. The handler uses an attacker-supplied absolute path from the multipart uri field and calls fs.move(tmp, target, { overwrite: true }) with no workspace confinement and no au...
Malicious code in tinkoff-boxy-independent-kasko-form (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873f98d16d6e9c4ecb2f5919621cfa940fe0059c48de29b1bb0eff6420527afc On require of the package, index.js loads bootstrap.js which reconstructs hardcoded hostnames via split-string.join obfuscation and downloads a...
Malicious code in tinkoff-fb-service-prefill-profile-contact (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d549ceada3b5ffb1d4affe80caa58597b04df716893d876f88193c1c7a81317f On require of the package's main entry, vendor.js downloads a platform-specific executable from anonymous Cloudflare Workers hosts under...
Malicious code in tinkoff-statist-browser-typed-client-sme.users.origination.web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfbb507be06c5d117ac6bfdff47a2441c2198b0d5702e4da97f598bc0d880a3 The package's main entry require's loader.js, which at import time downloads a per-platform binary from string-concatenation-obfuscated Cloudflare...
Malicious code in statist-browser-typed-client-sme.platform.web.productsnavigation.events (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adc0776701be44d8361a17020e910105fefdfd3c62a4b886455fa993b1e1781 Package's main entry loads adapter.js on require, which runs a bootstrap function at module load. It selects a platform-specific endpoint linuxx64,...
Exploit for Path Traversal in Fluentd
CVE-2026-44024 — Fluentd outfile $tag Path-Traversal Ar...
MAL-2026-12166 Malicious code in bigops-figma-to-html (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d43dbcd2d43f28af8266fac2d7e08a782dfbaaac1d02375438095a8001b24e On require, index.js unconditionally loads bootstrap.js, which selects a platform-specific endpoint, fetches an opaque binary from author-controlled...
CVE-2026-18907
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...
CVE-2026-18907
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...
EUVD-2026-53021
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...
CVE-2026-18907 PathTravelsal Vulnerability in com.talpa.hibrowser
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...
CVE-2026-18907 PathTravelsal Vulnerability in com.talpa.hibrowser
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...
PT-2026-68024
Name of the Vulnerable Software and Affected Versions The-Pocket/PocketFlow affected versions not specified Description The pocketflow-coding-agent cookbook example implements a pathworkdir, p helper function that acts as a simple wrapper for os.path.joinworkdir, p without performing...