CVE-2026-89084 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-89083

HP Advance software contains potential vulnerabilities that may enable elevation of privilege , remote code execution , or arbitrary file write under certain conditions, affecting the HP Advance server hosting the software. The CVSS 4.0 score is 9.3 (CRITICAL) , with a network attack vector requi...

CVE-2026-89083 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

EUVD-2026-81090

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

EUVD-2026-81089

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-89082

CVE-2026-89082 affects HP Advance software running on the HP Advance server, with potential vulnerabilities enabling elevation of privilege , remote code execution , or arbitrary file write under certain conditions. The assigned CVSS 4.0 base score is 9.3 (CRITICAL) , with a network attack vector...

CVE-2026-89082 HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

CVE-2026-35492

CVE-2026-35492 CVE-2026-35492 Vulnerabilidad de path traversal en PartitionedDataset permite escritura arbitraria de archivos Impacto PartitionedDataset en kedro-datasets era vulnerable a path traversal. Los IDs de partición se concatenaban directamente con la ruta base del dataset sin validación...

CVE-2026-30345

Prueba de Concepto CVE-2026-30345 Vulnerabilidad de escritura arbitraria de archivos en la funcionalidad de importación de copias de seguridad de CTFd 3.8.2. Inicio Rápido Antes de ejecutar cve202630345bashrcpoc.py Asegúrate de actualizar los valores según corresponda para tu exploit. Valores com...

CVE-2026-92604 Scirius through 3.8.0 Arbitrary File Write via PCAP Upload

Scirius through 3.8.0 contains an arbitrary file write vulnerability in the PCAP filestore upload endpoint that allows default User role users to write attacker-controlled JSON content to filesystem paths. Attackers can supply path traversal sequences in the uploaded document's id field to escape...

EUVD-2026-80897

Scirius through 3.8.0 contains an arbitrary file write vulnerability in the PCAP filestore upload endpoint that allows default User role users to write attacker-controlled JSON content to filesystem paths. Attackers can supply path traversal sequences in the uploaded document's id field to escape...

CVE-2026-92604

Scirius (by Stamus Networks ) through 3.8.0 is affected by an arbitrary file write vulnerability in the PCAP filestore upload endpoint . Users with the default User role can supply path traversal sequences in the uploaded document's _id field, allowing them to escape the intended directory and wr...

CVE-2026-85731

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2 , the content/file.Store extraction of OCI layers marked with io.deis.oras.content.unpack=true is vulnerable to an arbitrary file-write outside the store's working directory. The root cause lies in the pushDir path: extractTarDire...

CVE-2026-85731 oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of OCI layers marked with io.deis.oras.content.unpack=true can write outside the store working directory. The pushDir path through extractTarDirectory and ensureLinkPath validates symlink targets...

POC-CVE-2025-66034

fontvarlib.py — CVE-2025-66034 fontTools varLib — Escritura Arbitraria de Archivos + Inyección XML → Ejecución Remota de Código Tabla de Contenidos Descripción General Detalles de la Vulnerabilidad Cadena de Ataque Requisitos Instalación Configuración Uso Cómo Funciona Código Vulnerable Lista de...

CVE-2026-31802

🛡️ CVE-2026-31802 - 简易概念验证查看器 📋 关于 CVE-2026-31802 本仓库提供了 CVE-2026-31802 的概念验证 PoC 及分析报告。该问题存在于 npm tar 包中，是一个安全漏洞。攻击者可通过滥用符号链接和路径遍历，欺骗软件将文件写入其允许文件夹之外的位置。 这可能导致未经授权覆盖您计算机上的重要文件。了解并测试此漏洞有助于提升安全性。本项目展示了该漏洞的工作原理，并帮助安全研究人员验证修复方案。 🖥️ 系统要求 要在 Windows 机器上运行本软件，请确保系统满足以下条件： Windows 10 或更高版本 至少 2 GB 的可用硬盘空间...

EUVD-2026-80761

Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to create or replace arbitrary files on the...

CVE-2025-8110

CVE-2025-8110 - Bypass de symlink en Gogs - escritura arbitraria de archivos como el usuario del proceso Gogs Gogs //contents/. Gogs sigue el symlink y escribe bytes controlados por el atacante en el destino del enlace con los privilegios del proceso Gogs. Cuando Gogs se ejecuta como root, esto e...

helm-plugin-path-traversal-security-assessment

CVE-2026-35204 - Escritura Arbitraria de Archivos por Path Traversal en Plugin de Helm Informe de Ciberseguridad Estilo Consultor Informe profesional de evaluación de vulnerabilidades para el riesgo de path traversal en plugins de Helm, que incluye análisis técnico, impacto, remediación y...

CVE-2026-25732-NiceGUI-3.6.1

Autor: Mohammed Idrees Banyamer Contacto: Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE-2026-25732 — Path Traversal en NiceGUI en FileUpload → Escritura Arbitraria de Archivos Título del Exploit: Path Traversal en NiceGUI en FileUpload que Conduce a Escritura Arbitraria de...