PT-2026-108308

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description On Windows, the Root.Mkdir and Root.MkdirAll functions can create a directory at a junction target that is located outside the root, provided the junction points...

ReconHound

ReconHound ReconHound — это инструмент веб-разведки на Python, созданный для пентестеров, баг-хантеров и этичных хакеров. Он помогает выявлять скрытые пути, файлы, поддомены, параметры запросов, виртуальные хосты и фаззинг-эндпоинты, что делает его универсальным решением для глубокой веб-разведки...

CVE-2026-105816

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2007-4559-lab

CVE-2007-4559 — TarSlip: 15-летний обход каталогов Только для образовательных целей. Эта лаборатория намеренно эксплуатирует уязвимости файловой системы в изолированных Docker-контейнерах. Не запускайте в системах с конфиденциальными данными или в производственных средах. Автономная...

EUVD-2026-94629

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...

CVE-2026-76277 Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edituser capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation does not reject a trailing period before the...

EUVD-2026-93868

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user...

CVE-2026-46572

A flaw was found in ntfs-3g. This vulnerability allows a local attacker to achieve privilege escalation or cause a denial of service DoS by corrupting system memory. By providing a specially crafted NTFS filesystem image and creating a file within a malicious directory, an attacker can trigger a...

CVE-2026-42617

A flaw was found in NTFS-3G. A heap-based buffer overflow occurs when expanding a directory on a specially crafted NTFS filesystem image, such as during file creation. A local attacker can exploit this vulnerability to corrupt memory within the privileged binary, potentially leading to arbitrary...

CVE-2026-107215 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

CVE-2026-107215

The Excelize Go library (versions 2.3.1 to 2.11.0 ) is vulnerable to a remote panic or Out-of-Memory (OOM) Denial of Service due to improper validation of CFB directory-entry sizes. The extractPart function trusts the streamSize for EncryptionInfo and EncryptedPackage allocations before validatin...

CVE-2026-107215 Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

WordPress Super Forms plugin <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter vulnerability

Unauthenticated Arbitrary Directory Deletion via 'data...filessubdir' Parameter vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

CVE-2026-50181

CVE-2026-50181 Обход пути в файловых инструментах Langroid, позволивший чтение/запись за пределами настроенной текущей директории. Основной совет: GHSA-fg23-3346-88f5 База уязвимостей GitHub: github.com/advisories/GHSA-fg23-3346-88f5 Исследователь: @chaitanyagarware Кратко Поле| Значение ---|---...

GHSA-VHHQ-M2GM-RWC9 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Summary During an SSG build, page definitions returned by getSsgPages can provide custom dir and filename values. The builder joined those values to build.distDir and wrote the generated page without verifying that the final destination remained inside the distribution directory. Details A page...

EUVD-2026-93568

Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile...

CVE-2026-101886

Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 are vulnerable to a path traversal vulnerability. The flaw exists because the exported crosslaunch.share activity uses an unsanitized display name from a ContentProvider during file path construction. A malicious application ...

CVE-2022-26923-Powershell-POC

CVE-2022-26923-Powershell-POC Powershell POC для загрузки и автоматического запуска Certify и Rubeus из памяти. Как это работает? 1. Загружает Certify.exe и Rubeus.exe в память. 2. Сканирует целевую машину на наличие неправильно настроенных шаблонов сертификатов. подробнее на...

CVE-2024-24409

CVE-2024-24409 - ADManager Plus Build 7210 Уязвимость повышения привилегий Описание «Modify Computers» — это предопределённая роль в ADManager для управления компьютерами. Если у технического пользователя есть привилегия «Modify Computers» на компьютере, он может изменять атрибуты...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - обход каталогов в Cisco ASA и Cisco Firepower Threat Defense Эта утилита предназначена только для образовательных и этических целей тестирования. Использование этого скрипта для атаки на цели без предварительного взаимного согласия является незаконным. Ответственност...