EUVD-2026-124612

Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads 4.1.8 - A manipulated updatefile form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

CVE-2021-42183

CVE-2021-42183 MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/api/asset/image/. Detection If this file is readable it means the vulnerablilty exists. https://example.com/index.cfm/api/asset/image/?filePath=/Application.cfc Exploit...

CVE-2026-18379 Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: path traversal via unsanitized repo name in addrepo/removerepo

A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize directory traversal sequences such as...

CVE-2026-18379

A vulnerability exists in yggdrasil-worker-package-manager where repository management operations fail to sanitize directory traversal sequences (e.g., ../ ) within repository names. An authenticated attacker can exploit this flaw by supplying a crafted repository name to manipulate the root-leve...

CVE-2026-117542

The jDownloads Joomla extension (versions prior to 4.1.8 ) is vulnerable to an authenticated path traversal flaw. A manipulated update_file form parameter allows an attacker to bypass server-file selection restrictions, enabling them to move files from outside the permitted directory or assign un...

CVE-2026-117542 Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads < 4.1.8

Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads 4.1.8 - A manipulated updatefile form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose...

EUVD-2026-124538

MLflow before 3.18.0 using the FileStore backend contains a path traversal vulnerability that allows unauthenticated remote attackers to write files outside the intended run directory by supplying a malicious modelid parameter to the log outputs API. Attackers can exploit the unvalidated modelid...

CVE-2026-127202

MLflow versions prior to 3.18.0 using the FileStore backend are vulnerable to a path traversal vulnerability (CWE-22). An unauthenticated remote attacker can exploit the log outputs API by providing a malicious model_id parameter containing ../ sequences. This allows the attacker to create direct...

CVE-2025-8088-WinRAR-PathTraversal-PoC

CVE-2025-8088 WinRAR Path Traversal Exploit PoC A Proof-of-Concept exploit demonstrating the WinRAR path traversal vulnerability CVE-2025-8088 affecting versions ≤ 7.12. Vulnerability Details CVE ID : CVE-2025-8088 CVSS Score : 8.4 High Affected Versions : WinRAR ≤ 7.12 Patch Version : Fixed in...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

CVE-2026-123790

ComfyUI-Easy-Use version 1.3.6 contains a path traversal vulnerability in the savepreview handler for POST /easyuse/save/name. The handler checks the source directory before appending a user-supplied filename and allows the request to select the customnodes directory as a copy destination. An...

HostCMS Path Traversal

The vulnerability in the HostCMS website management system is related to improper restriction of the path name for the directory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Webasyst Shop-Script CMS Path Traversal

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

CVE-2026-123790 Unauthenticated Path Traversal in ComfyUI-Easy-Use Allows Remote Code Execution

ComfyUI-Easy-Use version 1.3.6 contains a path traversal vulnerability in the savepreview handler for POST /easyuse/save/name. The handler checks the source directory before appending a user-supplied filename and allows the request to select the customnodes directory as a copy destination. An...

CVE-2026-123790

ComfyUI-Easy-Use version 1.3.6 is vulnerable to a path traversal vulnerability in the save_preview() handler for the POST /easyuse/save/{name} endpoint. The root cause is that the handler fails to properly restrict user-supplied filenames, allowing an unauthenticated attacker to select the custom...

EUVD-2026-124521

ComfyUI-Easy-Use version 1.3.6 contains a path traversal vulnerability in the savepreview handler for POST /easyuse/save/name. The handler checks the source directory before appending a user-supplied filename and allows the request to select the customnodes directory as a copy destination. An...

CVE-2026-126996

The SakanaAI text-to-LoRA version 0.0.1 is vulnerable to a path traversal vulnerability within the Checkpoint Loading component. The flaw exists in the get_tokenizer function of the file src/hyper_llm_modulator/utils/model_loading.py. An attacker can execute a manipulation of the base_model_name_...

EUVD-2026-124510

A vulnerability was determined in SakanaAI text-to-LoRA 0.0.1. Affected by this issue is the function gettokenizer of the file src/hyperllmmodulator/utils/modelloading.py of the component Checkpoint Loading. Executing a manipulation of the argument basemodelnameorpath can lead to path traversal...

CVE-2026-126995 tjake Jlama SafeTensorIndex.java SafeTensorIndex.loadWeights path traversal

A vulnerability was found in tjake Jlama up to 0.8.4/0.9.0-beta. Affected by this vulnerability is the function SafeTensorIndex.loadWeights of the file jlama-core/src/main/java/com/github/tjake/jlama/safetensors/SafeTensorIndex.java. Performing a manipulation of the argument weightmap results in...