CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 e anteriores, LTS 2.426.2 e anteriores, não desativa um recurso do analisador de comandos de sua CLI que substitui um caractere '@' seguido por um caminho de arquivo em um argumento pelo conteúdo do arquivo, permitindo que atacantes não autenticados leiam arquivos...

GHSA-Q7M3-RHXG-7VXR n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

CVE-2026-81743

Flowintel versions >=3.3.0 allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this value, an attacker with high privileges can set LOG_...

wordlists

Wordlists Praxisnahe Infosec-Wortlisten, regelmäßig aktualisiert Aktuelle Wortlisten Technologien Diese Wortlisten basieren auf dem Quellcode der hier aufgeführten CMS/Server/Frameworks. Zu den aktuellen Wortlisten gehören: Wordpress Joomla Drupal Magento Ghost Tomcat Es gibt 2 Versionen jeder...

CVE-2025-65321

CVE-2025-65321 O bot do Discord Language Sloth é vulnerável a Directory Traversal nas funções gif e png. As funções constroem caminhos de arquivo usando entrada do usuário não sanitizada para o parâmetro 'name', permitindo que atacantes referenciem arquivos fora dos diretórios de recursos...

PT-2026-82804

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import session/export session of the file mcp sequential thinking/server.py of the component Import Session/Export Session. Such manipulation of the argument file path leads to path traversal...

CVE-2024-34102

CVE-2024-34102 Uso root@kitploit: python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL URL alvo -ip IP, --ip IP Seu endereço IP -p PORT, --port PORT Porta do servidor HTTP -f FILE, --file FILE Caminho para o arquivo a ser incluído no POC...

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

CVE-2026-66153

CVE-2026-66153 is a Link Following (CWE-59) vulnerability in the NEService auto-upgrade process of the SonicWall NetExtender Linux client . The process insecurely handles temporary files, allowing a local attacker with low privileges to manipulate file paths. The CVSS 3.0 score is 7.0 (HIGH) with...

CVE-2026-66153

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

PT-2026-81518

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-78208

exceljs-hardened before 5.0.0 (and exceljs through 4.4.0) is affected by a path traversal vulnerability in the Workbook.addImage() function. The function fails to validate file path inputs, allowing an attacker to supply an arbitrary path that reads any file accessible to the Node.js process and ...

CVE-2026-19093 Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path

The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which...

CVE-2026-19093

The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media. Users with the instructor role can exploit this to read arbitrary files on the server, including files outside the web root. Critically, the WordPress configuration file (wp-config.ph...

CVE-2026-48105 Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM internal/cluster/raft/fsm.go:applyRegisterFile accepts attacker-chosen file paths in manifest-registration proposals without validating them against the configured storage backend. T...

EUVD-2026-64192

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM internal/cluster/raft/fsm.go:applyRegisterFile accepts attacker-chosen file paths in manifest-registration proposals without validating them against the configured storage backend. T...

CVE-2026-76158 Datiphy Data Management Center - External Control of File Name or Path

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

CVE-2026-76390

In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer REST A...