13911 matches found
CVE-2026-66897 Instance template path traversal allows arbitrary host file write as root
A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates...
CVE-2026-70460
A path traversal and symlink vulnerability in rsync allows a malicious sender with write access to write files outside the intended directory. By exploiting symbolic links in conjunction with the --partial-dir or --backup-dir options, an attacker can bypass path restrictions to modify arbitrary...
BIT-DOCKER-CLI-2026-17106 Tar extraction in moby/go-archive can write outside the destination directory via link following
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
PT-2026-80919
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.8 Apache Camel versions 4.15.0 through 4.18.3 Apache Camel versions 4.19.0 through 4.21.9 Description A relative path traversal issue exists in the camel-google-storage consumer. When the downloadFileNa...
PT-2026-79855
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
PT-2026-80855
Name of the Vulnerable Software and Affected Versions adm-zip versions 0.5.9 through 0.6.0 Description The software follows symbolic links at the extraction destination. The Utils.sanitize function in util/utils.js fails to properly enforce containment by comparing only the string form of an...
PT-2026-80918
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.8 Apache Camel versions 4.15.0 through 4.18.3 Apache Camel versions 4.19.0 through 4.21.9 Description A relative path traversal issue exists in the camel-azure-storage-blob component. The...
PT-2026-80916
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.8 Apache Camel versions 4.15.0 through 4.18.3 Apache Camel versions 4.19.0 through 4.21.x Description A relative path traversal issue exists in the camel-azure-storage-datalake component during the...
PT-2026-80905
Name of the Vulnerable Software and Affected Versions AWX affected versions not specified Description A path traversal issue exists in the project archive extraction process. The project archive action plugin extracts zip and tar archive members by joining the project directory path with the memb...
CVE-2026-71364: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...
Exploit for CVE-2026-10053
CVE-2026-10053 — reproducible verification lab Self-contained...
CVE-2026-70383
A flaw was found in the DigiDoc4 client. This vulnerability, categorized as an Improper Limitation of a Pathname to a Restricted Directory Path Traversal, allows a local attacker to write files to arbitrary locations on the system with active user interaction. By exploiting this flaw, an attacker...
openSUSE 16 Security Update : git-lfs (openSUSE-SU-2026:21621-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21621-1 advisory. Changes in git-lfs: - update to 3.7.1: boo1252259 CVE-2025-26625 This release introduces security fixes for Linux, macOS, and Windows systems,...
CVE-2026-68766
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...
EUVD-2026-64311
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...
CVE-2026-68766 hashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...
CVE-2026-68766
hashcat through 7.1.2 is vulnerable to arbitrary file write via restore file option injection. The restore file parser (in src/restore.c) fails to restrict command-line options, allowing an attacker to inject directives such as --outfile and --potfile-path into a crafted restore file. This enable...
CVE-2026-68766 hashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...
CVE-2026-68766 hashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...