EUVD-2026-64954

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...

CVE-2026-60093

CVE-2026-60093 is a relative path traversal (CWE-22) in the Apache Camel camel-azure-storage-datalake component (versions 4.0.0–4.21.x, fixed in 4.14.9 / 4.18.4 / 4.22.0 ). The downloadToFile operation joined the configured fileDir with the remote file name from Azure Data Lake Gen2 without lexic...

CVE-2026-77914 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal...

EUVD-2026-64952

rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal sequences t...

CVE-2026-77914 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal...

CVE-2026-77914

rConfig versions prior to 8.2.13 contain a path traversal vulnerability in the export download endpoint . An authenticated attacker can manipulate the filename parameter with directory traversal sequences to escape the intended export directory and read arbitrary files accessible to the applicati...

CVE-2026-77914 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal...

CVE-2026-47630

CVE-2026-47630 — NVIDIA Triton Inference Server: استدعاء dlopen عشوائي عبر TRITONBATCHSTRATEGYPATH ثغرة اجتياز المسار المطلق في محمّل استراتيجية التجميع المخصص داخل triton-inference-server/core. تُمرَّر معلمة من معلمات إعداد النموذج دون أي تحقق إلى dlopenRTLDNOW | RTLDLOCAL، لذا فإن أي شخص قادر ع...

Ghost-Path-Traversal-CVE-2023-32235-

Report di Bug Bounty - Ghost Path Traversal CVE-2023-32235 Sommario L'applicazione Ghost è vulnerabile a una vulnerabilità di path traversal, identificata come CVE-2023-32235. Questa vulnerabilità consente a un attaccante di accedere a file sensibili al di fuori della directory prevista manipolan...

Exploit for CVE-2026-60093

CVE-2026-60093 — camel-azure-storage-datalake downloadToFile...

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

CVE-2026-71364

A path traversal vulnerability in AWX 's project_archive action plugin (part of Red Hat Ansible Automation Platform ) allows arbitrary file writes on the execution node. The plugin extracts zip/tar members by joining the project directory path with the member filename without path normalization o...

EUVD-2026-64918

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

CVE-2026-71364 Awx: project archive extraction allows path traversal file writes

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

Security Bulletin: Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

Summary Langflow contains multiple vulnerabilities in its authentication, authorization, and network request controls across several API surfaces. The MCP project authentication function omits the default authtype=none value from the set of modes requiring an API key, causing unauthenticated...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Summary Langflow OSS supports custom Python components and validation of component code for component development workflows. Weaknesses in custom component execution paths, validation endpoints, and trusted template enforcement could allow authenticated users to execute arbitrary Python code or...

CVE-2025-31131

CVE-2025-31131 - Exploit di Path Traversal in YesWiki 4.5.2 Questo è un exploit di path traversal non autenticato che colpisce le versioni di YesWiki precedenti alla 4.5.2. La vulnerabilità risiede nel parametro squelette, che consente di leggere file arbitrari dal server. Dettagli della...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal

CVE-2025-8088: Path Traversal Zero-Day di WinRAR — Da Zero a Pwn 🗿 Introduzione – Il “Vecchio Amico” Appena Colto in Fallo WinRAR — il classico polveroso che tutti hanno installato ma nessuno aggiorna — è stato appena colpito da un zero-day ad alta gravità : CVE-2025-8088. Gravità: CVSS v3.1 → 8....

CVE-2026-78381

RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API handler concatenates the database-controlled screen value directly with the application's source/ directory and opens the resulting path without verifying that...