LDAP Injection

centraldogma-server-auth-shiro is vulnerable to LDAP Injection. The vulnerability is due to insufficient sanitization of the login username before inserting it into an LDAP search filter, which allows an unauthenticated attacker to inject LDAP filter metacharacters, manipulate authentication...

CVE-2026-89490

A flaw was found in ocfs2, the Oracle Cluster File System, within the Linux kernel. On 32-bit kernels, an error in how directory cookie positions are calculated can lead to truncation when a directory exceeds 4 Gigabytes GiB in size. This truncation causes the system to repeatedly re-enumerate...

EUVD-2026-38208

Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion...

CVE-2026-88940

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further...

CVE-2026-88940 knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further...

EUVD-2026-75583

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further...

CVE-2026-88940 knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further...

CVE-2026-88940

knowns through version 0.33.0 fails to validate the path query parameter in the workspace browse endpoint , allowing remote, unauthenticated attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identi...

CVE-2026-88940 knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further...

CVE-2025-15693

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate...

EUVD-2025-210849

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate...

CVE-2025-15693 JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate...

CVE-2025-15693 JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate...

CVE-2025-15693

CVE-2025-15693 is a path traversal vulnerability in the JCH Optimize WordPress plugin, affecting versions 4.2.1 through 5.0.0 . The flaw occurs in an administrative image-browsing feature that fails to restrict directory paths to the site's web root, allowing high-privilege users (administrators ...

CVE-2026-76373

In AD LDAP app for Splunk SOAR versions below 2.3.8, a low-privilege user can inject crafted input into Active Directory queries via action parameters, enabling enumeration of accounts/groups/OUs, reading sensitive attributes from arbitrary objects, and redirecting account-modification actions. C...

CVE-2026-73244

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

CVE-2026-73244

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

CVE-2026-73244

kkFileView (Spring Boot-based) prior to version 5.0.1 suffers an unauthenticated path traversal: the POST /listFiles endpoint forwards a user-controlled path param from FileController.getFiles to Files.newDirectoryStream without constraining to the demo directory, enabling directory enumeration o...

PT-2026-70912

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

Malicious code in app-soda-layer (npm)

app-soda-layer 2.1.6 is an npm credential stealer and SSH backdoor that runs automatically on npm install through a postinstall hook test.js. It harvests Solana keypairs id.json, config.toml and .env secrets, then installs an operator-supplied SSH key into /.ssh/authorizedkeys and opens port 22 f...