143523 matches found
EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents
Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources. Existing benchmarks leave gaps in executable coverage of their runtime security risks, while evolving model capabilities, harnesses, tools, and...
CVE-2026-51907
In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...
PT-2026-104392
Name of the Vulnerable Software and Affected Versions image-downloader version 4.3.0 Description A path traversal issue exists where an attacker who can control the download URL can cause the downloaded response data to be written outside the configured destination directory. Path traversal is a...
CVE-2026-103648: Improper Limitation of a Pathname to a Restricted Directory
Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination directory...
CVE-2026-51906
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool saveurlimage function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the projectid parameter...
CVE-2026-51907: Improper Limitation of a Pathname to a Restricted Directory
In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...
CVE-2026-104417: Improper Limitation of a Pathname to a Restricted Directory
Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...
CVE-2014-125130: Improper Limitation of a Pathname to a Restricted Directory
CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...
PT-2026-104330
Name of the Vulnerable Software and Affected Versions Logback-classic versions 0.9.14 through 1.6.4 Description A path-traversal issue exists in the logback-classic module. An MDC-based discriminator value is passed unsanitized into a nested FileAppender path. An attacker who can influence this M...
PT-2026-104123
Name of the Vulnerable Software and Affected Versions bc-csharp versions prior to 2.7.0 Description Improper certificate validation occurs in the PkixNameConstraintValidator function. An attacker controlling a name-constrained intermediate CA can cause certificates to be accepted during PKIX...
PaperCut MF < 25.0.13 / 26.x < 26.0.5 Multiple Vulnerabilities
The version of PaperCut MF installed on the remote Windows host is prior to 25.0.13, or 26.x prior to 26.0.5. It is, therefore, affected by the following vulnerabilities: - An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of...
CVE-2026-15999: Improper Validation of Integrity Check Value
Improper validation of integrity check value in the AES-CCM implementation CcmParameters and CcmBlockCipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to modify CCM-encrypted content without detection via an AlgorithmIdentifier whose CCMParameters declar...
VulnCheck KEV: CVE-2014-125130
CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...
PT-2026-104367
In TaskingAI v0.3.0 in the QR Code Generator plugin save base64 image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project id parameter...
CVE-2026-104843: Improper Limitation of a Pathname to a Restricted Directory
uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows...
PT-2026-104405
Name of the Vulnerable Software and Affected Versions Nx versions 13.10.0 through 22.7.9 Nx versions 23.0.0 through 23.2.0 Description Nx migration planning fails to validate that the nx-migrations.migrations value read from a target package manifest is a contained relative path. A hostile direct...
PT-2026-104357
Name of the Vulnerable Software and Affected Versions uv versions 0.12.7 through 0.12.17 Description On Windows, the wheel extraction process can be manipulated by a malicious wheel to write files outside the intended installation prefix. This allows for the placement of an executable file into a...
CVE-2026-51906
A path traversal vulnerability exists in TaskingAI v0.3.0 within the DALL-E 3 image generation tool's save_url_image function. By manipulating the project_id parameter, an attacker can force the application to write downloaded images to arbitrary locations on the server filesystem. Technical deta...
PT-2026-104366
Name of the Vulnerable Software and Affected Versions TaskingAI version 0.3.0 Description In the DALL-E 3 image generation tool, the save url image function contains a path traversal flaw. This allows attackers to write downloaded images to arbitrary locations on the server filesystem by...
CVE-2026-51906: Improper Limitation of a Pathname to a Restricted Directory
In TaskingAI v0.3.0 in the DALL-E 3 image generation tool saveurlimage function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations on the server filesystem by manipulating the projectid parameter...