9112 matches found
CVE-2026-48614
A flaw was found in Plesk. An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives. This can result in arbitrary file write as root, leading to full privilege escalation on the underlying server. Mitigation Red Hat...
GO-2026-5762 Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish
Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish...
GO-2026-5806 Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus
Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus...
GO-2026-5801 Incus has an arbitrary file write on host via `exec-output` symlink in crafted image in github.com/lxc/incus
Incus has an arbitrary file write on host via exec-output symlink in crafted image in github.com/lxc/incus...
GO-2026-5802 Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus
Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus...
GO-2026-5498 Portainer has a path traversal in backup archive extraction that allows arbitrary file write in github.com/portainer/portainer
Portainer has a path traversal in backup archive extraction that allows arbitrary file write in github.com/portainer/portainer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...
Python-Multipart has Arbitrary File Write via Non-Default Configuration
SummaryA Path Traversal vulnerability exists when using non-default configuration options UPLOADDIR and UPLOADKEEPFILENAME=True. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. DetailsWhen UPLOADDIR is set and UPLOADKEEPFILENAME is...
PYSEC-2026-2053 Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command
Impact Multi-translation download could write to an arbitrary location when instructed by a crafted server. Patches https://github.com/WeblateOrg/wlc/pull/1128 Workarounds Do not use wlc download with untrusted servers. References This issue was reported to us by wh1zee via HackerOne...
Pyrofork has a Path Traversal in download_media Method
SummaryThe downloadmedia method in Pyrofork does not sanitize filenames received from Telegram messages before using them in file path construction. This allows a remote attacker to write files to arbitrary locations on the filesystem by sending a specially crafted document with path traversal...
PYSEC-2026-1841 Pyrofork has a Path Traversal in download_media Method
Summary The downloadmedia method in Pyrofork does not sanitize filenames received from Telegram messages before using them in file path construction. This allows a remote attacker to write files to arbitrary locations on the filesystem by sending a specially crafted document with path traversal...
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
SummaryThe fonttools varLib or python3 -m fontTools.varLib script has an arbitrary file write vulnerability that leads to remote code execution when a malicious .designspace file is processed. The vulnerability affects the main code path of fontTools.varLib, used by the fonttools varLib CLI and a...
AstrBot contains a directory traversal vulnerability
AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function installpluginupload of the interface '/plugin/install-upload' parses the filename from the request body provided by the user, and directly uses the filename to assign to filepath without checking the validi...
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
SummaryThe vulnerability allows any user to overwrite any files available under the account privileges of the running process. DetailsAs part of static analysis, iOS MobSF supports loading and parsing statically linked libraries .a. When parsing such archives, the code extracts the embedded objec...
PYSEC-2026-1670 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Summary The vulnerability allows any user to overwrite any files available under the account privileges of the running process. Details As part of static analysis, iOS MobSF supports loading and parsing statically linked libraries .a. When parsing such archives, the code extracts the embedded...
Copier's safe template has arbitrary filesystem read/write access
ImpactCopier's current security model shall restrict filesystem access through Jinja:- Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case.- Files are written in the destination directory according to...
Bugsink path traversal via event_id in ingestion
SummaryIn affected versions, ingestion paths construct file locations directly from untrusted eventid input without validation. A specially crafted eventid can result in paths outside the intended directory, potentially allowing file overwrite or creation in arbitrary locations.Submitting such...
PYSEC-2026-1823 `pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
Summary An authenticated path traversal vulnerability exists in the /json/upload endpoint of the pyLoad By manipulating the filename of an uploaded file, an attacker can traverse out of the intended upload directory, allowing them to write arbitrary files to any location on the system accessible ...
`pyLoad` has Path Traversal Vulnerability in `json/upload` Endpoint that allows Arbitrary File Write
SummaryAn authenticated path traversal vulnerability exists in the /json/upload endpoint of the pyLoad By manipulating the filename of an uploaded file, an attacker can traverse out of the intended upload directory, allowing them to write arbitrary files to any location on the system accessible t...
Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code
Path-Traversal - Arbitrary File Write in Assemblyline Service ClientIMPORTANT: This vulnerability is valid if you decide to use the assemblyline-service-client outside of the normal practice to using Assemblyline in a production environment. In practice, this code should always be executed within...
