CVE-2026-61800 Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...

proxylogscan

proxylogscan Questo strumento esegue una scansione di massa alla ricerca di una vulnerabilità in Microsoft Exchange Server che consente a un attaccante di bypassare l'autenticazione e impersonare l'amministratore CVE-2021-26855. Concatenando questo bug con un'altra vulnerabilità post-autenticazio...

CVE-2025-8088

CVE-2025-8088 : Vulnerabilità di Path Traversal in WinRAR tramite abuso di NTFS ADS 📌 Riepilogo Esecutivo CVE-2025-8088 è una vulnerabilità critica di path traversal in WinRAR versioni 7.12 e precedenti. Il difetto risiede nel modo in cui l'applicazione elabora i nomi dei file delle voci di...

cve-2025-4615

CVE-2025-4615 — Technische Analyse & Proof of Concept Vulnerability: Unsachgemäße Neutralisierung von Eingaben in der PAN-OS-Verwaltungs-Webschnittstelle Vendor Advisory: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 MITTEL — Integrität HOCH, Verfügbarkeit HOCH CWE: CWE-83...

cve-2022-41352

cve-2022-41352 genera poc.tar root@kitploit: $ chmod +x cpiopocgen.py $ ./cpiopocgen.py mostra il dito medio a cpio root@kitploit: $ cd /tmp $ mkdir -p poc/a/b copia poc.tar in /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ totale 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:56...

CVE-2026-81838

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code awsdac in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third part...

CVE-2026-59294

ResourceCacheService.getCacheName builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new FileresourceParentFolder, newFileName before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 -...

CVE-2026-54732

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

vRealizeLogInsightRCE

VMSA-2023-0001 POC für VMSA-2023-0001, der VMware vRealize Log Insight betrifft und die folgenden CVEs enthält: Sicherheitslücke bezüglich Directory Traversal in VMware vRealize Log Insight CVE-2022-31706 Sicherheitslücke in der Zugriffskontrolle von VMware vRealize Log Insight CVE-2022-31704...

EUVD-2026-67232

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code awsdac in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third part...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar Pfad-Traversal-Scanner Erkennt npm-Pakete, die für CVE-2026-31802 anfällig sind, eine Pfad-Traversal-Schwachstelle im npm-Paket tar, die beliebige Dateischreibvorgänge während der Archiv-Extraktion ermöglicht. Funktionen Scannt package-lock.json nach anfälligen...

CVE-2024-31771

CVE-2024-31771 TotalAV Scrittura Arbitraria di File TotalAV versione 6.0.x https://github.com/restdone/CVE-2024-31771/assets/42227817/ffe0c2ec-4ea6-4c29-852f-456b2e62f5b1 Cronologia: 13 febbraio 2024: Scoperta la vulnerabilità 6.0.740 e segnalata a TotalAV. 15 febbraio 2024: TotalAV ha confermato...

CVE-2024-25641-Exploit-for-Cacti-1.2.26

CVE-2024-25641 Exploit per Cacti 1.2.26 Sfruttamento di CVE-2024-25641 su Cacti 1.2.26. Quando un utente è autenticato, una vulnerabilità di scrittura arbitraria di file consente l'esecuzione remota di codice RCE. Panoramica Questo script automatizza il processo di sfruttamento di CVE-2024-25641 ...

CVE-2025-8110

CVE-2025-8110 — Gogs: Attraversamento di Symlink → RCE Panoramica CVE-2025-8110 è una vulnerabilità critica in Gogs servizio Git self-hosted versioni = 0.13.3. L'API PutContents valida i percorsi dei file per l'attraversamento di directory ../ ma non risolve i collegamenti simbolici prima della...

EUVD-2026-67182

ResourceCacheService.getCacheName builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new FileresourceParentFolder, newFileName before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 -...

CVE-2026-59294

Spring AI 's ResourceCacheService.getCacheName() builds an on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, before passing the result to new File(resourceParentFolder, newFileName). This allows an arbitrary file write via path traversal w...

CVE-2026-59294 Arbitrary File Write via Path Traversal in ResourceCacheService

ResourceCacheService.getCacheName builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new FileresourceParentFolder, newFileName before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 -...

libreoffice-convert vulnerable to path traversal / arbitrary file write

Impact options.fileName is used to build a filesystem path path.jointempDir.name, fileName and the caller-supplied document buffer is written there, but fileName is never reduced to a base name. A fileName containing "../" escapes the temporary directory, so a caller can write arbitrary content t...

NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write

NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write vulnerability discovered by ? in WordPress Npm libreoffice-convert versions 1.8.2...

CVE-2026-54732 libreoffice-convert: path traversal / arbitrary file write

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...