PT-2026-90784

Name of the Vulnerable Software and Affected Versions restify node-restify versions prior to 12.0.1 Description A remote path traversal flaw exists in the serveStatic function within the /lib/plugins/static.js library. Path traversal is a technique that allows an attacker to access files and...

CVE-2025-70819

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file...

CVE-2026-49030: Undefined Security Weakness

pathe through 2.0.3 unconditionally normalizes backslash characters to forward slashes on all platforms, including POSIX systems where backslash is a valid filename character. This causes join, resolve, and normalize to interpret backslash-separated dot notation sequences as directory traversal,...

CVE-2026-90774: Improper Limitation of a Pathname to a Restricted Directory

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

PT-2026-90841

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

CVE-2025-70820

Zettlab D6 Ultra (a NAS device) prior to firmware 1.7.0 is affected by an absolute path traversal vulnerability that allows an attacker with low privileges on an adjacent network to reach folders outside the user's personal folder, resulting in low confidentiality impact (CVSS 3.5, LOW). The reme...

EUVD-2026-77113

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

FreeBSD : Gitlab -- vulnerabilities (7fd351d1-af26-11f1-a883-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7fd351d1-af26-11f1-a883-2cf05da270f3 advisory. Gitlab reports: Path Traversal issue in repository commits API impacts GitLab CE/EE Insecure...

CVE-2026-90494: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any w...

CVE-2025-70819: Path Traversal: '../filedir'

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000610 advisory. Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8...

vuln-chain-labs

VulnChain Labs A deliberately vulnerable API that reproduces...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection...

CVE-2021-47943

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:41+00:00| seen| https://t.me/shimiscyberworld/1340...

Vulnerability handling is handled differently in GitLab Community and Enterprise editions.

GitLab has identified a vulnerability in both the Community and Enterprise editions of the platform. The vulnerability resides in the repository commit API, where path traversal is possible. As a result, unauthenticated users can read arbitrary files on the system. The root cause of the...

CVE-2026-80494

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containin...

CVE-2026-80494 Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containin...

CVE-2026-77005

The CODE MONKEYS PROPOSALS WordPress plugin (versions

CVE-2026-77005 Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can...

CVE-2026-77006

The WebTotem Backups WordPress plugin, affecting versions before 1.1.0 (specifically through 1.0.1), contains a vulnerability allowing for arbitrary file deletion . The root cause is a failure to validate user-supplied file paths, a lack of user capability checks, and the discarding of internal C...