Backstage: Improper repository path validation in a Scaffolder backend module

Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...

GHSA-2CMG-V53W-8XFP Backstage: Improper repository path validation in a Scaffolder backend module

Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...

EUVD-2026-94003

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions...

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions

Impact An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect filesystem paths outside the expected working area. Depending on the backend deployment, this could compromise backend confidentiality, integrity, or availability. Patches ...

Backstage: Cloud storage catalog locations may cross configured storage boundaries

Impact Catalog entity providers for Azure Blob Storage and AWS S3 did not sufficiently validate storage object paths, which could allow catalog descriptors to be read from outside the intended storage boundary. Access is limited to locations reachable by the backend's configured credentials...

EUVD-2026-94013

Backstage: Cloud storage catalog locations may cross configured storage boundaries...

GHSA-9GHW-48H5-V2W5 Backstage: Improper input validation in proxy-backend

Impact An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a path outside the configured base path on the target server. This is limited to target servers already configured as proxy endpoints and requires Backstage authentication by...

EUVD-2026-94010

Backstage: Improper input validation in proxy-backend...

Backstage: Improper input validation in proxy-backend

Impact An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a path outside the configured base path on the target server. This is limited to target servers already configured as proxy endpoints and requires Backstage authentication by...

Security Bulletin:SSL/TLS Client Cipher Suite Selection Flaw Allows On-Path Attackers to Bypass Certificate Verification

Summary The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the...

CVE-2026-41958

A flaw was found in VisiData. This path traversal vulnerability allows a remote attacker to perform arbitrary file writes on the host system. By convincing a user to process a specially crafted URL pointing to a malicious ZIP archive, an attacker can extract files outside the intended destination...

CVE-2026-42532

A flaw was found in VisiData. A path traversal vulnerability in the EmailSheet attachment extraction feature allows an attacker to write arbitrary files by convincing a user to process a specially crafted email .eml file. This flaw enables an attacker to create or overwrite critical files outside...

-Netdata-PrivEsc-CVE-2024-32019

CVE-2024-32019-Netdata-ndsudo-PrivEsc CVE-2024-32019: Netdata ndsudo PrivEsc HTB Editor 用于利用 Netdata 的 SUID 二进制文件 ndsudo 中 PATH 劫持 漏洞的自动化 Bash 脚本（CVE-2024-32019）。该漏洞利用程序经过专门调整，以绕过在加固环境（如 Hack The Box 的 Editor 机器）中常见的限制。 🎓 教育免责声明 本仓库及其中包含的脚本严格仅用于教育和网络安全研究目的。 作者不对因使用本材料而可能产生的滥用或损害负责。本脚本设计用于受控的实验室环境...

CVE-2026-101886

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

CVE-2021-27905.POC

CVE-2021-27905.POC CVE-2021-27905に関連するLFIのPOC apache-solr-file-read nuclei templateのPOC 使用方法 traverse.sh path 例えば、パスとして/rootを使用すると、すべてのファイルの内容を（再帰的に）表示します。 ./traverse.sh /root また、サーバー上のすべてのファイル（もちろん読み取り権限があるもの）をトラバースして内容を取得することも可能です。 ./traverse.sh / ドキュメント 脆弱なSolrインスタンスからのレスポンスはstatus...

CVE-2026-87902

CVE-2026-87902 — WordPress 核心路径遍历 / LFI / RCE 通过 WordPress 核心页面模板解析器中的双重编码路径遍历实现的未认证本地文件包含，配合基于 PEAR 的 RCE 利用链。 漏洞详情 字段| 值 ---|--- CVE| CVE-2026-87902 CVSS| 9.2（严重）— CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CWE| CWE-98 — 包含/请求文件名的控制不当 受影响版本| WordPress 4.7.0 – 7.1.1 修复版本|...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-50181

CVE-2026-50181 Langroid 文件工具中的路径遍历漏洞允许在配置的当前目录之外进行读/写操作。 主要公告： GHSA-fg23-3346-88f5 GitHub 漏洞数据库： github.com/advisories/GHSA-fg23-3346-88f5 研究人员致谢： @chaitanyagarware 概览 字段| 值 ---|--- CVE| CVE-2026-50181 GHSA| GHSA-fg23-3346-88f5 项目| langroid/langroid 包| langroid 生态系统| pip 严重性| 高 CVSS|...

CVE-2024-53677

CVE-2024-53677 CVE-2024-53677 の概念実証エクスプロイト - Apache Struts ファイルアップロードパストラバーサルの脆弱性によるリモートコード実行...

NPM: Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

NPM: Ghost: Path Traversal Vulnerability in Ghost ImageSize Service discovered by ? in WordPress Npm ghost versions = 6.14.0, 6.27.0...