CVE-2026-57863

Crater Invoice (through 6.0.6 ) contains a path traversal vulnerability in its self-update API. The root cause is unsanitized ZIP entry names containing ../ sequences passed to PHP's ZipArchive::extractTo(), allowing authenticated company owners to write arbitrary files outside the intended extra...

CVE-2026-57863 Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit...

EUVD-2026-65478

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit...

CVE-2026-57863 Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint

Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to write arbitrary files outside the intended extraction directory by supplying crafted ZIP archives with ../ sequences to the unzip endpoint. Attackers can exploit...

CVE-2026-78886

CVE-2026-78886 is a path traversal vulnerability in liketrek TREK (versions up to 3.0.22 ), affecting an unknown function within the file server/src/nest/journey/journey-public.controller.ts of the Public Journey Photo Proxy component. An unauthenticated remote attacker can exploit this with high...

EUVD-2026-65474

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...

CVE-2026-78886 liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...

CVE-2026-78886 liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated...

CVE-2021-41773

HTTP Apache Path Traversal NSE-Skript CVE-2021-41773 Beschreibung Dieses NSE-Skript prüft, ob ein Apache-HTTP-Server anfällig für die Path Traversal -Schwachstelle CVE-2021-41773 ist. Ein anfälliger Server ermöglicht es Angreifern, ohne Anmeldung auf Dateien zuzugreifen, auf die sie keinen Zugrif...

CVE-2026-57909

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

python3.14 security update

An update is available for python3.14. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

CVE-2026-57909

CVE-2026-57909 is a path traversal vulnerability in WatchGuard Agent that allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system. No user interaction or special privileges are required. The CVSS 4.0 base score is 9.4 (CRITICAL) , reflectin...

CVE-2026-57909 WatchGuard Agent path traversal allows unauthenticated remote code execution

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...

CVE-2026-57909 WatchGuard Agent path traversal allows unauthenticated remote code execution

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...

EUVD-2026-65439

A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system...

patch-CVE-2026-06555

Patch: CVE-2026-06555 Dettagli della vulnerabilità CVE : CVE-2026-06555 Prodotto : SonicWall SMA Descrizione : Path traversal Gravità : Alta Stato della patch: DISTRIBUITA...

CVE-2021-41773

RCE-Exploit für Apache 2.4.49 CVE-2021-41773 und 2.4.50 CVE-2021-42013: IMHO nur „spezielle“ Setups sind für diesen RCE anfällig. Dasselbe gilt für die „Arbitrary File Read“-Exploits, die du gesehen hast. Beide CVEs sind tatsächlich fast dieselbe Path-Traversal-Schwachstelle die zweite ist der...

CVE-2021-43798

CVE-2021-43798 Grafana-Arbitrary-Datei-Lesen 8.0.0 8.3.0 Eine Schwachstelle in Grafana CVE-2021-43798 der Versionen 8.0.0 8.3.0, die es einem nicht authentifizierten Angreifer ermöglicht, beliebige Dateien vom Server auszulesen, indem ein Path-Traversal-Angriff auf den /public/plugins/-Pfad genut...

LabAutomationCVE-2021-43798

LabAutomationCVE-2021-43798 Ich erstelle ein Skript für die Pentest-Automatisierung, mit dem ich CVE-2021-43798 eine Path-Traversal-Schwachstelle in Grafana ausnutze, um Benutzergeheimnisse SSH-Schlüssel zu stehlen und anschließend Privilegien auf einem Linux-System zu erlangen mittels SUID. Ich...