rustypaste < 0.18.1 - Filename Header Path Traversal

rustypaste before 0.18.1 contains a path traversal caused by improper validation of the custom filename HTTP header, letting attackers write files outside the upload directory. id: CVE-2026-90774 info: name: rustypaste 0.18.1 - Filename Header Path Traversal author: carfeii severity: high...

etherblob-explorer

EtherBlob Explorer Search and extract blob files on the Ethereum network using Etherscan.io API. Introduction EtherBlob Explorer is a tool intended for researchers, analysts, CTF players or anyone curious enough wanting to search for different kinds of files or any meaningful human-supplied data ...

CLEANSTART-2026-CX04394 It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations

Security vulnerability affects the keycloak package. It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations...

Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents

The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot...

PT-2026-129129

Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resource location without enforcing expected validation constraints. This can be exploited by an unauthenticated actor to direct the server to make requests to arbitrary network...

EUVD-2026-108596

The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of filesystem locations it may serve files from to network administrators on multisite, allowing a subsite administrator who is not trusted at the network level to approve arbitrary locations and...

PT-2026-121769

The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of filesystem locations it may serve files from to network administrators on multisite, allowing a subsite administrator who is not trusted at the network level to approve arbitrary locations and...

CVE-2026-112254

A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function fetchhtml of the file locations/services/propertyurlimporter.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The...

CVE-2026-112254: Server-Side Request Forgery (SSRF)

A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function fetchhtml of the file locations/services/propertyurlimporter.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The...

Agit8or clientst0r: Server request forgery vulnerability

Agit8or clientst0r 3.17.586 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the improper handling of url parameters in the fetchhtml function within the Property URL Importer component’s locations/services/propertyurlimporter.py file. It may...

avwx-engine (>=1.2.5, <=1.4.6), azely (>=0.4.0, <=0.6.0) +2 more potentially affected by CVE-2026-77387 via geopy (1.23.0)

geopy PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - avwx-engine =1.2.5, =0.4.0, =0.2.4, =0.2.4, =0.2.8 Source cves: CVE-2026-77387 Source advisory: OSV:PYSEC-2026-4218...

CVE-2026-89271: Unrestricted Upload of File with Dangerous Type

The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated attackers to write files with arbitrary content to arbitrary locations, though not to execute code on a default server...

CVE-2026-108100

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

CVE-2026-108100 HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

EUVD-2026-95791

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

CVE-2026-108100 HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

CVE-2026-108100: Improper Neutralization of Special Elements used in an SQL Command

HortusFox hortusfox-web before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted includeinfo values to the /api/locations/list endpoint. Attackers can place subqueries in includeinfo, which PlantsModel::getSpecificInfo concatenates into t...

avwx-engine (>=1.2.5, <=1.4.6), azely (>=0.4.0, <=0.6.0) +2 more potentially affected by CVE-2026-77387 via geopy (1.23.0)

geopy PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopy and may be impacted: - avwx-engine =1.2.5, =0.4.0, =0.2.4, =0.2.4, =0.2.8 Source cves: CVE-2026-77387 Source advisory: OSV:GHSA-MHVH-FQ92-PFMR...

EUVD-2026-91071

On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...

EUVD-2026-91121

The /knowledgebase/uploadtempdocs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory...