CVE-2026-30633

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the getdoc and updatedoc tools...

CVE-2026-30632

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the createdoc tool...

CVE-2026-30632

CVE-2026-30632 affects knowns-dev/knowns 0.11.4. The vulnerability is a directory traversal triggered by a crafted folder name value to the create_doc tool. CVSSv3.1 base score 7.5 (HIGH) with Network attack vector, Low attack complexity, Privileges Required: None, User Interaction: None; Impact:...

PT-2026-62513

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory version 12.2.1.4.0 Oracle Unified Directory version 14.1.2.1.0 Description An issue exists in the OUD Core component of Oracle Fusion Middleware. An unauthenticated attacker with network access via LDAP can exploit thi...

PT-2026-62060

Name of the Vulnerable Software and Affected Versions Data::ReqRep::Shared versions prior to 0.05 Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using O EXCL or O NOFOLLOW. The segment is created in reqrep.h using the open function...

PT-2026-62064

Name of the Vulnerable Software and Affected Versions Data::RoaringBitmap::Shared versions prior to 0.02 Description This issue occurs when creating a world-readable mmap backing file and opening it without the O EXCL or O NOFOLLOW flags. The segment is created using the open function with a mode...

📄 WordPress Copymatic 1.6 Unauthenticated Shell Upload

WordPress Copymatic plugin version 1.6 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against the...

CVE-2026-30632

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the createdoc tool...

Oracle Linux 10 : plexus-utils (ELSA-2026-38514)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38514 advisory. 3.5.1-9 - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165336 Tenable has extracted the preceding description block directly...

PT-2026-62502

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise th...

PT-2026-62514

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a high privileged attacker with network access via LDAP to compromise the...

CVE-2026-30633

CVE-2026-30633 affects knowns-dev/knowns 0.11.4 and is a Directory traversal vuln triggered by crafted path values to the get_doc and update_doc tools. The baseline CVSSv3.1 score is 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no privileges required, no user interaction, and imp...

CVE-2026-30633

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the getdoc and updatedoc tools...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2754)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename whe...

HPESBNW05083 rev.1 - Private 5G Core, Traefik StripPrefix Route-Level Auth Bypass via Path Normalization (CVE-2026-48020)

Potential Security Impact: Remote: Access Restriction Bypass, Authentication Bypass, Directory Traversal SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Aruba Networking Private 5G Core 1.26.1.1 and earlier CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

PT-2026-62453

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description An issue exists in the OUD Core component of the Oracle Unified Directory product within Oracle Fusion Middleware. An unauthenticated attacke...

PT-2026-62068

Name of the Vulnerable Software and Affected Versions Data::DisjointSet::Shared versions prior to 0.02 Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using the O EXCL or O NOFOLLOW flags. The segment is created in dsu.h using the op...

PT-2026-62083

Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A Directory Traversal issue exists in the nex-ai-draw-io/mcp-server component. This flaw allows a remote attacker to execute arbitrary code by traversing directories to access or manipulat...

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server...

MiracleLinux 8 : vim-8.0.1763-27.el8_10.ML.1 (AXSA:2026-1312:17)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1312:17 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162...