CVE-2026-108141

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

EUVD-2026-111124

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

EUVD-2026-111118

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-108140

This vulnerability allows an authenticated user with the Restore Operator role to perform a relative path traversal attack. If the user also controls the contents of a backed-up NAS share , they can write attacker-controlled files to an arbitrary path on the backup server. No specific software ve...

CVE-2026-108141

An authenticated user with the Restore Operator role can exploit a relative path traversal vulnerability to write attacker-controlled files to an arbitrary path on the backup server. This attack is possible if the user also controls the contents of a backed-up NAS share . The vulnerability is cat...

Parasoft CTP deserialization restore path JSP RCE

Anonymous POST database/restore;welcome with malicious backup.zip deserializes gadget chain writing JSP under webapp images; GET executes. """Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT - Unfiltered Java Deserialization in the Database Restore Path Behind a Raw-URI License Gate Bypass an...

Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT - Unfiltered Java Deseriali — Detect

Fingerprint / reachability check for Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT - Unfiltered Java Deserialization in the Database Restore Path Behind a Raw-URI License Gate Bypass and a Fail-Open Authentication Gate, Reaching A !/usr/bin/env python3 -- coding: utf-8 -- """Detection for...

PinTheft-asm

pintheft-asm Rewrote PinTheft-go in raw x86-64 asm because why not. make ./pintheft Drops a root shell. Restore command printed on exit. For details → original PoC...

Redis < 7.2.14 / 7.4.x < 7.4.9 / 8.2.x < 8.2.6 / 8.4.x < 8.4.3 / 8.6.x < 8.6.3 / 8.8.x < 8.8-RC1 Multiple Vulnerabilities

The version of Redis installed on the remote host is prior to 7.2.14, or 7.4.x prior to 7.4.9, or 8.2.x prior to 8.2.6, or 8.4.x prior to 8.4.3, or 8.6.x prior to 8.6.3, or 8.8.x prior to 8.8-RC1. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in...

PT-2026-126659

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

PT-2026-126658

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

Valkey/Redis CVE-2026-25243 RESTORE RCE trigger

CVE-2026-25243: malformed RESTORE payload with DEBUG SET-SKIP-CHECKSUM-VALIDATION can corrupt memory / crash server requires --enable-debug-command on vulnerable builds. !/usr/bin/env python3 -- coding: utf-8 -- """Redis/Valkey CVE-2026-25243 RESTORE zipmap memory corruption trigger.""" from futu...

CVE-2026-116204

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action tools/security/actions/despam.php that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so a...

CVE-2026-116204 YesWiki before 4.7.0 CSRF via despam Admin Action

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action tools/security/actions/despam.php that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so a...

EUVD-2026-109462

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action tools/security/actions/despam.php that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so a...

CVE-2026-116204 YesWiki before 4.7.0 CSRF via despam Admin Action

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action tools/security/actions/despam.php that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so a...

CVE-2026-116204

YesWiki versions prior to 4.7.0 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the despam action (tools/security/actions/despam.php). This flaw allows unauthenticated attackers to perform unauthorized actions, such as deleting or restoring pages, by tricking an authent...

PT-2026-123045

YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action tools/security/actions/despam.php that lets unauthenticated attackers delete or restore pages through an administrator's session. Attackers can plant an auto-submitting raw HTML form on a wiki page, so a...

CVE-2026-57208 Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind

Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint...

CVE-2026-57208 Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind

Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the checkpoints repository to craft malicious checkpoint metadata that causes entire session resume or entire checkpoint...