DEBIAN-CVE-2026-110859

GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout that allows remote attackers to read arbitrary files by supplying a branch name parsed as a git option. Attackers can host a repository whose default branch is named --pathspec-from-file=, causing cloning...

CVE-2026-110859

GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout that allows remote attackers to read arbitrary files by supplying a branch name parsed as a git option. Attackers can host a repository whose default branch is named --pathspec-from-file=, causing cloning...

CVE-2026-110860

A flaw was found in GitPython. This vulnerability allows an attacker to write files outside the intended working directory and corrupt repository metadata by tricking an application into processing a crafted repository containing symbolic links. Because the Submodule.move function validates...

CVE-2026-110859

GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout that allows remote attackers to read arbitrary files by supplying a branch name parsed as a git option. Attackers can host a repository whose default branch is named --pathspec-from-file=, causing cloning...

CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem...

CVE-2026-0312

Palo Alto Networks Checkov by Prisma Cloud is impacted by path traversal vulnerabilities (CWE-22). These flaws allow an unauthenticated local user to write files to arbitrary locations on the scanning filesystem. As a workaround , users should avoid running Checkov over untrusted content and expl...

CVE-2026-110766

Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avatars/:avatarId to escape the avatars...

CVE-2026-110764

AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as well as files usi...

EUVD-2026-101566

Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avatars/:avatarId to escape the avatars...

CVE-2026-110766

The Colanode server (version 0.4.7 and earlier ) is vulnerable to a path traversal vulnerability (CWE-22) in the Avatar Download Route . Authenticated users can read arbitrary .jpeg files by providing a percent-encoded ../ traversal sequence in the avatarId parameter. By sending a GET request to ...

CVE-2026-110766 Colanode Server through 0.4.7 Path Traversal via Avatar Download Route

Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in avatarId. Attackers can send percent-encoded ../ sequences to GET /client/v1/avatars/:avatarId to escape the avatars...

EUVD-2026-101564

AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since...

CVE-2026-110764

AstronRPA versions through 1.1.6 are vulnerable to a Cross-Tenant File Disclosure via the resource-service /file/download endpoint. The root cause is an Insecure Direct Object Reference (IDOR) in the FileMapper.getFile function, which fails to perform ownership or tenant checks. This allows authe...

CVE-2026-110657

Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via crafted variable labels. Attackers can supply a graph.nnef with '../' sequences or absolute paths in labels to create or...

hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist that could allow a remote attacker to execute arbitrary code, escalate privileges, cause a denial of service, disclose sensitive information, or modify files without authorization. These issues arise...

hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain condition...

hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...

hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...

HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist within several software components that could potentially allow an attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files...