CVE-2026-95701 MISP Path Traversal via Organization Name in Org-Statistics Logo Check

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

PT-2019-2883

Name of the Vulnerable Software and Affected Versions libvirtd versions prior to 4.10.1 libvirtd versions prior to 5.4.1 Description The issue is related to the virDomainSaveImageGetXMLDesc API, which has access control errors. This allows an attacker with access to the libvirtd socket to probe t...