CVE-2022-51022: Improper Limitation of a Pathname to a Restricted Directory

YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory...

Python CPython security vulnerabilities

A security vulnerability exists in Python versions prior to CPython 3.16.0. This vulnerability arises because tarfile.tarfilter can be bypassed via specially crafted link entries—such as symbolic links with empty names or similar directory names—which redirect subsequent archive members away from...

PT-2026-121480

Name of the Vulnerable Software and Affected Versions PhpSpreadsheet versions prior to 1.30.7 PhpSpreadsheet versions prior to 2.1.19 PhpSpreadsheet versions prior to 2.4.8 PhpSpreadsheet versions prior to 3.10.8 PhpSpreadsheet versions prior to 5.10.0 Description The XmlScanner::scan function in...

PT-2026-121378

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...

CVE-2019-25779: Improper Limitation of a Pathname to a Restricted Directory

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

PT-2026-121424

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

CVE-2021-48014: Improper Limitation of a Pathname to a Restricted Directory

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...

PT-2026-121381

Name of the Vulnerable Software and Affected Versions Rootblox versions prior to 1.0.6 Description Rootblox contains a PHP Remote File Inclusion issue caused by improper control of filenames used in include or require statements. This allows for PHP Local File Inclusion, where an attacker can...

PT-2026-121337

Name of the Vulnerable Software and Affected Versions Academist Core versions prior to 1.4.1 Description An improper control of filename for include/require statement in the PHP program allows for Local File Inclusion. This occurs when the application fails to properly validate the file path used...

Red Hat: CVE-2026-115207: patch: Filename validation bypass in reversal fallback allows file creation outside the working directory

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...

Gitea 1.27.0 Arbitrary File Read

Gitea versions 1.22.1 through 1.27.0 contain an unauthenticated arbitrary file-read vulnerability in Org-mode markup rendering. The supplied Python proof of concept requests a specified server-side file through a public repository markup endpoint. https://packetstorm.news/download/237059...

PT-2026-121340

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

PT-2026-120891

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail usercopy plugin. With the file based backend, the source path was built from the login name without rejecting path separators, so a login name containing a slash could cause...

PT-2026-121422

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craf...

Linux Distros Unpatched Vulnerability : CVE-2026-92205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on...

PT-2026-121556

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entrie...

ROS-20261022-73-0044

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of an untrusted network policy file. Exploiting these vulnerabilities allows a malicious actor to compromise the integrity of protected information...

CVE-2022-51025: Improper Limitation of a Pathname to a Restricted Directory

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

AlmaLinux 9 : cockpit-files (ALSA-2026:84595)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:84595 advisory. cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202 cockpit-files: cockpit-files: Loca...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142754)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142754 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspa...