CVE-2020-13941

CVE-2020-13941: إساءة استخدام مسارات UNC في بيئات Windows في Apache Solr تم العثور على عدة نقاط نهاية لـ Solr تقبل المسارات المطلقة. في أنظمة Windows، يمكن فرض هذه المسارات المطلقة لجعل نظام التشغيل يتصل بخادم SMB يتحكم فيه المهاجم. قد يؤدي هذا السلوك إلى هجمات مثل: التقاط تجزئة NTLM وكسرها محليً...

CVE-2025-46822

CVE-2025-46822 अनधिकृत निरपेक्ष पथ के माध्यम से मनमाना फ़ाइल पढ़ना विवरण: जबकि Path.resolve विधि का उपयोग पथ ट्रैवर्सल से बचाव के लिए किया जा रहा है, मैंने पाया है कि निरपेक्ष पथ का उपयोग सफलतापूर्वक आंतरिक फ़ाइलों को पढ़ लेता है, एंडपॉइंट भी प्रमाणित नहीं है, जिसका अर्थ है कि कोई भी व्यक्ति पूरे...

iovyroot

iovyroot أداة روت تستند إلى ثغرة CVE-2015-1805 تدعم الإصدارات 32 و 64 بت ولكنها تتطلب عناوين نواة مطلقة انظر offsets.c تم إجراء برهان المفهوم بواسطة idler1984 https://github.com/idl3r/testcode...

Gradio - Absolute Path Traversal

Gradio 6.7 on Windows with Python 3.13+ contains an absolute path traversal caused by incorrect path validation in path joining logic, letting unauthenticated attackers read arbitrary files from the server. id: CVE-2026-28414 info: name: Gradio - Absolute Path Traversal author: 0xAkoko severity:...

LOLLMS WebUI - Absolute Path Traversal

An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...

MLflow Absolute Path Traversal

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. id: CVE-2023-3765 info: name: MLflow Absolute Path Traversal author: DhiyaneshDK severity: critical description: | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. impact: | This vulnerability can...

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

CVE-2026-85184

@fastify/middie versions = 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an absolute-form request target to its path before dispatching. Because the two layers evaluate different strings, a request...

CVE-2026-85184

@fastify/middie (a Fastify plugin for HTTP middleware) versions 9.1.0 through 9.3.3 are affected by a path-scoped middleware bypass. The root cause is a mismatch: middie evaluates the raw request target to decide whether to run path-scoped middleware, while the Fastify router resolves an absolute...

CVE-2026-85184 @fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target

@fastify/middie versions = 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an absolute-form request target to its path before dispatching. Because the two layers evaluate different strings, a request...

EUVD-2026-70979

@fastify/middie versions = 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an absolute-form request target to its path before dispatching. Because the two layers evaluate different strings, a request...

EUVD-2026-57462

SiYuan: Absolute filesystem path and OS username disclosure via resolveAssetPath...

CVE-2021-43798-Exploit-for-Windows-and-Linux

CVE-2021-43798-विंडोज-और-लिनक्स-के-लिए-शोषण CVE-2021-43798 के लिए संशोधित शोषण। मूल शोषण कोड: https://www.exploit-db.com/exploits/50581 परिवर्तन: यह संशोधित संस्करण विंडोज और लिनक्स अंतर्निहित सर्वर दोनों के साथ संगत है। जब कोई उपयोगकर्ता पूर्ण पथ दर्ज करता है उदा:...

EUVD-2026-68213

browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in runagenttask, allowing attackers to create directories at arbitrary locations by supplying absolute paths to saverecordingpath, savetracepath, saveagenthistorypath, or savedownloadpath parameters. Attackers...

PT-2026-83557

Name of the Vulnerable Software and Affected Versions browser-use web-ui versions 2.0.0 through 3.0.0 Description The software fails to validate browser settings paths within the run agent task function. This allows unauthenticated users to create directories at arbitrary locations on the system...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cpio (UTSA-2026-092966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092966 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. Tenable has...

CVE-2026-40526

Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...

EUVD-2026-66606

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mageai/api/resources/BrowserItemResource.py passes a caller-supplied path to the filesystem read and write helpers without calling the containment helper that the sibling...

CVE-2026-70551

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

Astra Linux – Vulnerability in node-tar

The npm package “tar” also known as node-tar in versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has an arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent the extraction of absolute file paths by converting absolute paths into relative...