CVE-2026-58257

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...

CVE-2026-58257 GRR vulnerable to Arbitrary File Read and Deletion

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...

EUVD-2026-111410

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

CVE-2026-11111 – TOCTOU in File Permission Check Before Open Program Code Python toctouserver.py - File server that checks permission then opens import os, time, tempfile from flask import Flask, request app = Flaskname SAFEDIR = '/tmp/safe' @app.route'/read' def readfile: filename =...

CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - Local File Inclusion LFI Vulnerability in Kubio AI Page Builder for WordPress 🧱 🔍 Overview CVE-2025-2294 is a critical 🔥 Local File Inclusion LFI vulnerability affecting the Kubio AI Page Builder plugin for WordPress versions up to and including 2.5.1. This flaw...

Sensitive File Disclosure

Vitest is vulnerable to Sensitive File Disclosure. The vulnerability is due to misapplication of server.fs.deny on Vitest dev servers, where the server serves files such as .env, private keys, .git repositories, and the .vitest-secret-token over plain HTTP, and an attacker who can reach the UI,...

CVE-2026-100669 Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass

Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...

CVE-2026-100669 Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass

Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...

CVE-2026-100669 Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass

Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config IIS, every deny rule usersensitivefolders, useraccounts, userdata, usererrorredirect, userpages, system, vendor, ignorefolders sets...

CVE-2026-76555

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it and copying it into a publicly accessible directory, allowing any user whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import...

WordPress WP Import Export Lite plugin < 3.9.33 - Authenticated Sensitive File Disclosure vulnerability

Authenticated Sensitive File Disclosure vulnerability discovered by Hasyros in WordPress Plugin WP Import Export Lite versions 3.9.33...

CVE-2026-76555

The WP Import Export Lite WordPress plugin (versions before 3.9.33 ) is vulnerable to authenticated sensitive file disclosure via a path traversal flaw. The plugin fails to validate user-supplied file paths before reading and copying them into a publicly accessible directory. This allows any user...

CVE-2026-76555: Improper Limitation of a Pathname to a Restricted Directory

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it and copying it into a publicly accessible directory, allowing any user whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import...

CVE-2026-18061: Improper Restriction of XML External Entity Reference

Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive files from application hosts that read cached query results,...

WordPress Contact Form to Any API plugin < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable Filename vulnerability

Unauthenticated Sensitive File Disclosure via Predictable Filename vulnerability discovered by Farid Narimanov in WordPress Plugin Contact Form to Any API versions 3.0.7...

CVE-2026-14952

Frauscher's FDS102 web server exposes sensitive railway signaling and track layout data — including /FdsBackup.zip and files under /downloads/* — without authentication over HTTP. CVSS 8.7 (HIGH) reflects high confidentiality impact; no integrity or availability effects. No patch or workaround is...

PT-2026-78910

An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive at /FdsBackup.zip and additional files under /downloads/, directly over HTTP without a valid session. These files disclose detailed railway signaling and track layout information tha...

EUVD-2026-62586

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

CVE-2026-20320

CVE-2026-20320 is an Out-of-Band Blind XML External Entity (XXE) Injection vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks . The root cause is that external entity resolution is allowed by default, enabling an unauthenticated, remote attacker to send a crafted XML ...