oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php has a security vulnerability. This vulnerability stems from improper handling of the name, username/password/type/id parameters in the saveuser function within the adminclass.php file of the User Account Management component. It may lead to SQL injection,...

Jupyter nbconvert path traversal vulnerability

Versions 5.4.0 through 7.17.2 of Jupyter’s nbconvert contain a path traversal vulnerability. This vulnerability arises because ExtractOutputPreprocessor concatenates attacker-controlled filenames containing cell output metadata to the output directory without any restrictions. When victims use...

Chris Trudesk arbitrary file upload vulnerability

Versions 1.2.11 and earlier of Chris Trudesk contain an arbitrary file upload vulnerability. This vulnerability stems from improper file upload restrictions; attackers can upload HTML or SVG files via the uploadlogo, uploadpagelogo, and uploadfavicon endpoints. They can also forge image MIME type...

Chris Trudesk path traversal vulnerability

Chris Trudesk versions 1.2.11 and earlier have a path traversal vulnerability. This vulnerability stems from path traversal attacks, where administrators can delete any file by providing encoded traversal sequences for the DELETE /api/v1/backup/:backup request. Additionally, unvalidated file valu...

Astral UV path traversal vulnerability

Versions of Astral UV prior to 0.8.22 have a path traversal vulnerability. This vulnerability stems from improper path handling during the tar extraction process in the source code distribution sdist. A specially crafted sequence of symbolic links can redirect file writing to locations outside of...

The Foreman OpenSCAP path traversal vulnerability

The Foreman Foreman-OpenSCAP has a path traversal vulnerability. This vulnerability stems from improper validation of relative file paths when parsing Source DataStream SDS files. It is susceptible to path traversal attacks; attackers can trick users or automated systems into parsing specially...

Jelmer Vernooij Dulwich backlink vulnerability

In versions Jelmer Vernooij Dulwich 0.24.0 through 1.2.8, there is a backlink vulnerability. This vulnerability stems from a symbolic link traversal flaw in the porcelain.checkoutpaths=... function, which utilizes raw os.open without employing ONOFOLLOW. Exploiting this allows attackers to craft ...

BusyBox path traversal vulnerability

BusyBox 1.37.0 has a path traversal vulnerability. This vulnerability stems from the lack of proper validation in the file operations conducted by the libarchive component, allowing for path traversal and the creation of arbitrary files...

Splunk SOAR authorization issue vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain an authorization issue vulnerability. This vulnerability stems from the failure to enforce editing permissions for the Automation Broker, allowing authenticated users lacking such privileges to download the Splunk SOAR Automation Broker Docker Compos...

Astral UV path traversal vulnerability

Versions of Astral UV prior to 0.11.6 contain a path traversal vulnerability. This vulnerability arises from path traversal, allowing attackers to supply a wheel containing a relative traversal path within a RECORD entry. As a result, users may delete any file other than the installation prefix...

Apache Pulsar path traversal vulnerability

Path traversal vulnerabilities exist in Apache Pulsar versions 2.10.0 through 4.0.14 and 4.1.0 through 4.2.5. These vulnerabilities stem from the Pulsar Packages Management Service’s file system storage provider, which fails to validate version components within package names. These components ma...

ekko-studio input validation error vulnerability

Versions 1.0.6 and earlier of ekko-studio contain an input validation error vulnerability. This vulnerability stems from improper handling of the outputpath parameter in the saveGeneratedImages function within the Media Generation API component, specifically in the file...

WordPress WP Mailster arbitrary file upload vulnerability

WordPress WP Mailster versions 1.9.1.0 and earlier contain an arbitrary file upload vulnerability. This vulnerability stems from the lack of restrictions on uploading files of malicious types, potentially allowing attackers to upload web shells to the web server...

Oretnom23 File-Management-System-php authorization issue vulnerability

The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain an authorization issue vulnerability. This vulnerability stems from the lack of authentication for the ID parameter in the deletefolder function within ajax.php, potentially allowing...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a security vulnerability. This vulnerability arises because the built-in /flags service can be manipulated via ?setvalue= to alter the bvar/mbvar dump path; additionally, the bvardumptabs path is not properly sanitized. As a result, remote attackers...

MAL-2026-18098 Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on...

Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c7f807a5943ac03cda3bdddc675ad3192d210e1f0ba1300959feff5d1d29c915 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on...

MAL-2026-18097 Malicious code in research-probe-6150c1c915 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a646eaf4fe72ba013abc53d52c0bf017a9c4f3bfc54a8c358f9f246d3ac41945 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on...

Malicious code in research-probe-6150c1c915 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a646eaf4fe72ba013abc53d52c0bf017a9c4f3bfc54a8c358f9f246d3ac41945 The package is most likely a reconnaissance of a shared infrastructure, collecting potentially sensitive data from cloud endpoints, activated via a PTH file on...

CVE-2026-113681 OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 Cineon Reader Heap Out-of-Bounds Read

OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causing a heap out-of-bounds read. Attackers can supply a crafted Cineon file with a huge declared width that wraps the size...