CVE-2026-110234: Insecure Temporary File

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-83509: Untrusted Search Path

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-83505: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-73027: External Control of System or Configuration Setting

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-102672: Time-of-check Time-of-use (TOCTOU) Race Condition

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS that use Squirrel.Mac-based automatic updates are vulnerable to a local race in the privileged ShipIt helper. The...

CVE-2026-101168: Insertion of Sensitive Information into Log File

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

CVE-2026-106047: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files...

PT-2026-111382

Name of the Vulnerable Software and Affected Versions Schneider Electric Modicon PLC affected versions not specified Description Devices fail to properly sanitize calculated signal data within imported CSV trace files before displaying it on the Trace page. An attacker could trick an authorized...

CVE-2026-110115: Improper Limitation of a Pathname to a Restricted Directory

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters...

CVE-2026-79715: Improper Limitation of a Pathname to a Restricted Directory

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libgit2 vulnerabilities (USN-8628-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8628-1 advisory. It was discovered that libgit2 incorrectly handled the Git Smart Protocol. A remote attacker...

Qualcomm Embedded Authentication Bypass File Write

The vulnerability of embedded Qualcomm software lies in the lack of authentication for critical functions. Exploiting this vulnerability allows attackers to write arbitrary files...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Pillow vulnerability (USN-8690-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8690-1 advisory. It was discovered that Pillow did not properly manage memory when processing certain image files. An attacker could possibly u...

kali-preseed-examples

Kali Preseed Examples Debian preseed files are useful tools to automate installation and configuration of a Debian-based distribution. Kali is able to utilize these to speedup installations with a hands-off, customized, consistent installation. For much more info on preseed files, please consult...

CVE-2026-75061

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...

CVE-2026-19627

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths...

CVE-2019-19653

CVE-2019-19653 Chevereto information disclosure = 3.13.5 Core. Log files for the bulk importer are available for anyone to see and are easily enumerated /app/importer/jobs/9/process.txt /app/importer/jobs/9/errors.txt...

CVE-2026-75076 IBM Aspera Enterprise Webapps Information Disclosure

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...

CVE-2026-75061

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a path traversal flaw. A remote attacker can exploit this by sending a specially crafted URL request containing "dot dot" sequences (/../) to bypass directory restrictions. This allows the attacker to write arbitrary files on the syste...

CVE-2026-75061 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...