Backstage: Improper repository path validation in a Scaffolder backend module

Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...

GHSA-2CMG-V53W-8XFP Backstage: Improper repository path validation in a Scaffolder backend module

Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. Patches Patched in...

EUVD-2026-94003

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions...

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions

Impact An authenticated user who can execute an eligible template and influence an allowed Bitbucket repository could affect filesystem paths outside the expected working area. Depending on the backend deployment, this could compromise backend confidentiality, integrity, or availability. Patches ...

Backstage: Cloud storage catalog locations may cross configured storage boundaries

Impact Catalog entity providers for Azure Blob Storage and AWS S3 did not sufficiently validate storage object paths, which could allow catalog descriptors to be read from outside the intended storage boundary. Access is limited to locations reachable by the backend's configured credentials...

EUVD-2026-94013

Backstage: Cloud storage catalog locations may cross configured storage boundaries...

GHSA-9GHW-48H5-V2W5 Backstage: Improper input validation in proxy-backend

Impact An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a path outside the configured base path on the target server. This is limited to target servers already configured as proxy endpoints and requires Backstage authentication by...

EUVD-2026-94010

Backstage: Improper input validation in proxy-backend...

Backstage: Improper input validation in proxy-backend

Impact An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a path outside the configured base path on the target server. This is limited to target servers already configured as proxy endpoints and requires Backstage authentication by...

Security Bulletin:SSL/TLS Client Cipher Suite Selection Flaw Allows On-Path Attackers to Bypass Certificate Verification

Summary The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the...

CVE-2026-41958

A flaw was found in VisiData. This path traversal vulnerability allows a remote attacker to perform arbitrary file writes on the host system. By convincing a user to process a specially crafted URL pointing to a malicious ZIP archive, an attacker can extract files outside the intended destination...

CVE-2026-42532

A flaw was found in VisiData. A path traversal vulnerability in the EmailSheet attachment extraction feature allows an attacker to write arbitrary files by convincing a user to process a specially crafted email .eml file. This flaw enables an attacker to create or overwrite critical files outside...

-Netdata-PrivEsc-CVE-2024-32019

CVE-2024-32019-Netdata-ndsudo-PrivEsc CVE-2024-32019: Netdata ndsudo PrivEsc HTB Editor PATH Hijacking भेद्यता का शोषण करने के लिए Bash में स्वचालित स्क्रिप्ट नेटडाटा के SUID बाइनरी ndsudo CVE-2024-32019 में। यह एक्सप्लॉइट विशेष रूप से किलेबंद वातावरण जैसे हैक द बॉक्स की Editor मशीन में पाई जाने...

CVE-2026-101886

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

CVE-2021-27905.POC

CVE-2021-27905.POC CVE-2021-27905 से संबंधित LFI का POC POC apache-solr-file-read nuclei टेम्पलेट के लिए उपयोग traverse.sh path उदाहरण के लिए, /root को पथ के रूप में उपयोग करने पर सभी फ़ाइलों की सामग्री पुनरावर्ती रूप से प्रदर्शित होगी ./traverse.sh /root सर्वर पर हर फ़ाइल स्पष्ट रूप से पढ़ने की...

CVE-2026-87902

CVE-2026-87902 — اجتياز المسار / تضمين الملفات المحلية / تنفيذ التعليمات البرمجية عن بُعد في نواة WordPress تضمين ملفات محلية بدون مصادقة عبر اجتياز المسار مزدوج الترميز في محلّل قوالب الصفحات في نواة WordPress، مع سلسلة تنفيذ تعليمات برمجية عن بُعد قائمة على PEAR. تفاصيل الثغرة الحقل| القيمة...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-50181

CVE-2026-50181 लैंग्रॉइड फ़ाइल टूल्स में पथ ट्रैवर्सल ने कॉन्फ़िगर किए गए वर्तमान निर्देशिका के बाहर पढ़ने/लिखने की अनुमति दी। प्राथमिक सलाह: GHSA-fg23-3346-88f5 GitHub सलाह डेटाबेस: github.com/advisories/GHSA-fg23-3346-88f5 शोधकर्ता क्रेडिट: @chaitanyagarware एक नज़र में क्षेत्र| मान ---|--- CVE...

CVE-2024-53677

CVE-2024-53677 CVE-2024-53677 के लिए प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट - Apache Struts फ़ाइल अपलोड पथ ट्रैवर्सल भेद्यता जो रिमोट कोड एक्सीक्यूशन की ओर ले जाती है...

Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Impact An input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. Vulnerable versions This vulnerability is present in Ghost from v6.14.0 up to v6.27.0. Patches v6.27.0 contains a fix for this issue. How to update For...