109618 matches found
CLEANSTART-2026-GO41173 Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly
Security vulnerability affects the apache-hive package. Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly...
PT-2026-108189
Name of the Vulnerable Software and Affected Versions Tenable Identity Exposure SaaS affected versions not specified Description A command injection flaw exists in the Active Directory Events Listener. This allows an authenticated attacker with low privileges to execute arbitrary commands with...
PT-2026-107809
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 6.3.316 via the submit form function. This is due to insufficient validation of attacker-controlled JSON field declarations against the actual form...
PT-2026-108040
HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 and...
PT-2026-107864
A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration CI system to process a crafted build manifest. By specifying local file Uniform Resource Identifiers URIs within source download definitions, t...
PT-2026-108308
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description On Windows, the Root.Mkdir and Root.MkdirAll functions can create a directory at a junction target that is located outside the root, provided the junction points...
ReconHound
ReconHound ReconHound هي أداة استطلاع ويب مبنية بلغة Python، مصممة لمختبر الاختراق، وصيادي الثغرات، والقراصنة الأخلاقيين. تساعد في اكتشاف المسارات والملفات والنطاقات الفرعية ومعاملات الاستعلام والمضيفات الافتراضية ونقاط النهاية القابلة للفحص — مما يجعلها حلاً متعدد الاستخدامات للاستطلاع العميق...
CVE-2026-105816
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...
CVE-2007-4559-lab
CVE-2007-4559 — TarSlip: اجتياز المسار عبر 15 عامًا للاستخدام التعليمي فقط. يستغل هذا المختبر عن قصد ثغرات نظام الملفات داخل حاويات Docker معزولة. لا تشغّله على أي نظام يحتوي بيانات حساسة أو في بيئات الإنتاج. مختبر Docker مستقل بذاته يوضح CVE-2007-4559 — ثغرة «TarSlip» سيئة السمعة في وحدة tarfile...
EUVD-2026-94629
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...
CVE-2026-76277 Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise
In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...
EUVD-2026-93868
yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user...
CVE-2026-46572
A flaw was found in ntfs-3g. This vulnerability allows a local attacker to achieve privilege escalation or cause a denial of service DoS by corrupting system memory. By providing a specially crafted NTFS filesystem image and creating a file within a malicious directory, an attacker can trigger a...
CVE-2026-42617
A flaw was found in NTFS-3G. A heap-based buffer overflow occurs when expanding a directory on a specially crafted NTFS filesystem image, such as during file creation. A local attacker can exploit this vulnerability to corrupt memory within the privileged binary, potentially leading to arbitrary...
CVE-2026-107215 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...
CVE-2026-107215
The Excelize Go library (versions 2.3.1 to 2.11.0 ) is vulnerable to a remote panic or Out-of-Memory (OOM) Denial of Service due to improper validation of CFB directory-entry sizes. The extractPart function trusts the streamSize for EncryptionInfo and EncryptedPackage allocations before validatin...
CVE-2026-107215 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...
WordPress Super Forms plugin <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter vulnerability
Unauthenticated Arbitrary Directory Deletion via 'data...filessubdir' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...
CVE-2026-50181
CVE-2026-50181 ثغرة اجتياز المسار Path Traversal في أدوات ملفات Langroid سمحت بالقراءة والكتابة خارج دليل العمل الحالي المحدد. الإرشاد الأساسي: GHSA-fg23-3346-88f5 قاعدة بيانات إرشادات GitHub: github.com/advisories/GHSA-fg23-3346-88f5 نسبة الفضل للباحث: @chaitanyagarware في لمحة الحقل| القيمة...
GHSA-VHHQ-M2GM-RWC9 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory
Summary During an SSG build, page definitions returned by getSsgPages can provide custom dir and filename values. The builder joined those values to build.distDir and wrote the generated page without verifying that the final destination remained inside the distribution directory. Details A page...