CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

CVE-2021-31800 - قراءة/كتابة ملفات عشوائية في خادم SMB الخاص بـ Impacket متجه CVSS : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H درجة CVSS : 9.9 حرجة الوصف تسمح ثغرة مسار اجتياز Path Traversal في smbserver.py للمهاجم بقراءة/كتابة ملفات عشوائية على الخادم. شرح تفصيلي لهذه المشكلة:...

CVE-2026-102255

A pre-authentication Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 appliance (models 6210, 7210, and 8200v ) due to an unintended forward-proxy alternate access path in the Work Place interface . An unauthenticated remote attacker can exploit this to force the a...

CVE-2026-54520

CVE-2026-54520 ai-agent-automation workflow file step path traversal allowed read/write outside the expected directory. Primary advisory: GHSA-cm8g-8jfq-887p Researcher credit: @chaitanyagarware At a Glance Field| Value ---|--- CVE| CVE-2026-54520 GHSA| GHSA-cm8g-8jfq-887p Project|...

EUVD-2026-94321

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-41958

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-41958

A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version: dev (commit 38b21f78)). By providing a crafted URL to trigger the functionality, an attacker can use a specially crafted .zip file to achieve arbitrary file write . No specific remedi...

CVE-2026-41958

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version: dev (commit 38b21f78)). By providing a specially crafted .eml file , an attacker can trigger this vulnerability to achieve arbitrary file write . The provided documents do not include specifi...

EUVD-2026-94320

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-35204

CVE-2026-35204 This repository represents a PoC to a CVE-2026-35204 Description "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem...

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crow...

cve-2026-87902-wordpress-lfi-lab

CVE-2026-87902 / GHSA-7hp8-65ch-5whp — تضمين ملف محلي LFI غير مُصادَق عليه في getpagetemplate في ووردبريس ← تنفيذ تعليمات برمجية عن بُعد RCE مشروط مختبر إعادة إنتاج + ماسح ضوئي لقائمة عناوين URL + إثبات مفهوم PoC، مبني ومُتحقَّق منه من البداية إلى النهاية مقابل إصدارات حقيقية من ووردبريس 7.1.1 قا...

CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal

🚨 CVE-2026-87902: تجاوز المسار غير المُصادق عليه في نواة ووردبريس وتخفيف هجمات RCE 🔴 شاهد الشرح الكامل ودليل التخفيف: 👉 اضغط هنا للمشاهدة على يوتيوب 📖 نظرة عامة يوفر هذا المستودع ملاحظات مرجعية طارئة، وقواعد تخفيف على خادم الويب، وإعدادات تقوية مشمولة في تحليلنا التقني لـ CVE-2026-87902 CVSS 9.2...

BIT-JOOMLA-2026-90915 Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...

CVE-2026-92533

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92533 Path Traversal in BugTracker.NET

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92533

A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...

CVE-2026-92533 Path Traversal in BugTracker.NET

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...