69134 matches found
PT-2026-99020
rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...
PT-2026-106309
Summary The /home/file path:path endpoint in web client.py serves static files by directly concatenating the user-supplied file path with the home directory constant. There is no path traversal filtering, no path normalization check, and no authentication required. An attacker can use ../ sequenc...
openSUSE 16 Security Update : python-PyMuPDF (openSUSE-SU-2026:21912-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21912-1 advisory. Changes in python-PyMuPDF: - CVE-2026-82035: a path traversal vulnerability in the font branch of extractobjects in src/main.py bsc1280486 Tenable has...
WordPress 4.7.x < 4.7.37 / 4.8.x < 4.8.32 / 4.9.x < 4.9.33 / 5.0.x < 5.0.29 / 5.1.x < 5.1.26 / 5.2.x < 5.2.28 / 5.3.x < 5.3.25 / 5.4.x < 5.4.23 / 5.5.x < 5.5.22 / 5.6.x < 5.6.21 / 5.7.x < 5.7.19 / 5.8.x < 5.8.17 / 5.9.x < 5.9.18 / 6.0.x < 6.0.16 / 6.1.x < 6.1.14 / 6.2.x < 6.2.13 / 6.3.x < 6.3.12 / 6.4.x < 6.4.12 / 6.5.x < 6.5.12 / 6.6.x < 6.6.9 / 6.7.x < 6.7.9 / 6.8.x < 6.8.10 / 6.9.x < 6.9.9 / 7.0.x < 7.0.6 / 7.1.x < 7.1.2 Page Template Path Traversal
The version of WordPress installed on the remote host is 4.7.x prior to 4.7.37, or 4.8.x prior to 4.8.32, or 4.9.x prior to 4.9.33, or 5.0.x prior to 5.0.29, or 5.1.x prior to 5.1.26, or 5.2.x prior to 5.2.28, or 5.3.x prior to 5.3.25, or 5.4.x prior to 5.4.23, or 5.5.x prior to 5.5.22, or 5.6.x...
The vulnerability of the BuildKit container-building software lies in the improper restriction of the path name to the restricted-access directory, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...
CVE-2026-82708
The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...
curl: [HIGH] CWE-22 — Path Traversal in FTP Wildcard Download via Unencoded `.` in Escaped Filenames
Summary A malicious or MITM'd FTP server can cause a client using CURLOPTWILDCARDMATCH to download files outside the intended remote directory, by returning a LIST response with a filename containing .. path-traversal sequences. Details In the CURLWCDOWNLOADING state lib/ftp.c:4079-4095, each...
CVE-2026-93353
The copyparty SFTP front end contains a volume restriction bypass vulnerability. Authenticated SFTP users can exploit three specific handlers—_mkdir , _rmdir , and _chattr —to bypass xvol volflag enforcement. The root cause is that these handlers construct destination paths using vfs.get(), vn.ca...
CVE-2026-82708
The Botslab G980H dash camera firmware contains a path traversal vulnerability within its HTTP server . An attacker with access to the device's WiFi network can submit a crafted request to bypass directory restrictions and access files on the device's removable storage . This could lead to the ex...
CVE-2026-82708 Botslab G980H Dashcams Improper Limitation of a Pathname to a Restricted Directory
The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...
EUVD-2026-86463
The Botslab G980H dash camera firmware contains a path traversal vulnerability in its HTTP server. An attacker with access to the device's WiFi network could submit a crafted request to access files within the device's removable storage that were not intended to be directly accessible through the...
CVE-2026-97365
A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be performed from remote. The exploit has been publicly...
CVE-2026-97365 chonkie-inc littrs lib.rs mount path traversal
A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be performed from remote. The exploit has been publicly...
CVE-2026-97365 chonkie-inc littrs lib.rs mount path traversal
A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be performed from remote. The exploit has been publicly...
CVE-2026-97365
A path traversal vulnerability exists in chonkie-inc littrs versions 0.6.1 and 0.6.2 . The flaw is located in the Sandbox::mount function within the file crates/littrs/src/lib.rs , where manipulating the relative argument can allow an attacker to traverse paths. This vulnerability can be triggere...
EUVD-2026-86455
A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be performed from remote. The exploit has been publicly...
CVE-2026-97365 chonkie-inc littrs lib.rs mount path traversal
A vulnerability was determined in chonkie-inc littrs 0.6.1/0.6.2. Impacted is the function Sandbox::mount of the file crates/littrs/src/lib.rs. Executing a manipulation of the argument relative can lead to path traversal. The attack may be performed from remote. The exploit has been publicly...
org.apache.camel/camel-knative: Apache Camel Knative: Header injection vulnerability allows server-side request forgery
A flaw was found in Apache Camel Knative component. The Knative consumer in camel-knative improperly handles CloudEvent extension fields in structured content mode, copying them directly into message headers without proper filtering. This allows an unauthenticated attacker to inject internal Came...
Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)
At a glance - Actor: attacker who controls the -o/--output argument to trestle author catalog,profile,ssp-generate e.g. via a CI pipeline that derives the output directory from repository-controlled data - Primitive: attacker-controlled --output value reaches trestleroot / args.output write sink...