69403 matches found
cve-2026-87902-detection
wp-ghsa-7hp8-lab Herramientas de detección y banco de pruebas reproducible para GHSA-7hp8-65ch-5whp / CVE-2026-87902 — unauthenticated path traversal in page-template resolution leading to conditional RCE WordPress, CWE-98, CVSS 4.0: 9.2. | ---|--- check/| Controlador remoto, pasivo, sin acceso a...
CVE-2026-91801
A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution...
EUVD-2026-85121
A path traversal vulnerability exists in Foxit PDF Editor/Reader's handling of embedded PDF resources. Insufficient validation of resource file paths may allow files to be written outside their intended locations, potentially enabling arbitrary code execution...
CVE-2026-91801
Foxit PDF Editor/Reader is susceptible to a path traversal vulnerability within its handling of embedded PDF resources , specifically involving RichMedia Annotations . The vulnerability is caused by insufficient validation of resource file paths , which may allow files to be written outside of th...
CVE-2026-19438
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
Exploit for CVE-2026-87902
CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress getpagetem...
CVE-2026-19438 Mint Workbench I Path traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
EUVD-2026-85017
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
CVE-2026-19438
ABB Mint Workbench I is vulnerable to a Path Traversal vulnerability (Improper Limitation of a Pathname to a Restricted Directory). This issue affects versions through 5876 . The vulnerability allows for unauthorized access to files or directories outside of the intended restricted scope. No spec...
CVE-2026-19438 Mint Workbench I Path traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
Exploit for CVE-2026-87902
CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-tra...
Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
MGASA-2026-0435 Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
EUVD-2026-84950
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal...
SUSE CVE-2026-93709
Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows canonicalises it. A doubled slash, a dot...
SUSE CVE-2026-93986
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the...
CVE-2026-75887: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...
PT-2026-97599
Name of the Vulnerable Software and Affected Versions OpenShift console affected versions not specified Description An unauthenticated attacker can exploit a path traversal flaw by manipulating the lng and ns query parameters in the '/locales/resource.json' endpoint. This allows the attacker to...
CVE-2026-79306
CyberPanel v1.9.1 is vulnerable to a path traversal vulnerability in the compress method via the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can provide absolute or out-of-scope file paths in the listOfFiles JSON property, along with ...
EUVD-2026-85401
CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply an arbitrary absolute or out-of-scope path in the fileName JSON property. Because...