52 matches found
CVE-2026-51592
CVE-2026-51592 — TahaBakhtari/SubtitleGenerator의 경로 탐색 요약 TahaBakhtari/SubtitleGenerator의 /updatesubtitle 엔드포인트에 경로 탐색path traversal 취약점이 존재합니다. 이 엔드포인트는 인증되지 않은 클라이언트로부터 filename 매개변수를 받아 경로 탐색 시퀀스를 검증하지 않은 채 os.path.join을 사용하여 고정된 기본 디렉터리와 결합합니다. 그 결과, 원격의 인증되지 않은 공격자는 실행 중인 프로세스의 권한 범위 내에서 의도된...
CVE-2026-85409
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
CVE-2026-85409
Eleveo Quality Management 9.7.0 is affected by a path traversal vulnerability in the QuestionnaireService.runDataExportNow function of the Questionnaire Service component. Manipulating the file_name argument allows a remote attacker with low privileges to read, modify, or delete files outside the...
EUVD-2026-70889
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
CVE-2026-85409 Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...
CVE-2026-79407
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...
CVE-2026-79407
CVE-2026-79407 is a path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 . The vulnerable code resides in metagpt/ext/spo/utils/load.py, where set_file_name() and load_meta_data() join an attacker-controlled FILE_NAME value with the settings directory and open the resulting path wit...
CVE-2026-79407
A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...
CVE-2026-47862
An attacker who can set the filename header on a message reaching a ZipTransformer with ZipResultType.FILE the default can cause the resulting .zip archive to be written to an arbitrary filesystem path outside the configured workDirectory. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5...
CVE-2026-47862 ZipTransformer uses file_name header to build workDirectory path without sanitization
An attacker who can set the filename header on a message reaching a ZipTransformer with ZipResultType.FILE the default can cause the resulting .zip archive to be written to an arbitrary filesystem path outside the configured workDirectory. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5...
CVE-2026-47862
Spring Integration's ZipTransformer component is vulnerable to a path traversal issue when using the default ZipResultType.FILE result type. An attacker who can set the file_name message header on a message reaching the transformer can cause the resulting .zip archive to be written to an arbitrar...
CVE-2026-66007
A flaw was found in datasets. This path traversal vulnerability allows a remote attacker to read arbitrary local files. By providing specially crafted file names in the metadata, an attacker can trick the system into including sensitive local files when datasets are saved or published, leading to...
cve-2026-47862 - MEDIUM - ZipTransformer uses file_name header to build workDirectory path without sanitization
cve-2026-47862 - MEDIUM - ZipTransformer uses filename header to build workDirectory path without sanitization...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via filename headers when constructing the workDirectory path. An attacker can write a .zip archive to an arbitrary filesystem location outside the intended directory by supplying crafted input. Details A Directory...
WordPress RapiSafe plugin <= 1.0.4 - Unauthenticated Arbitrary File Deletion via 'rsmfcf7_session' and 'file_name' Parameters vulnerability
Unauthenticated Arbitrary File Deletion via 'rsmfcf7session' and 'filename' Parameters vulnerability discovered by Spy0x7 in WordPress Plugin RapiSafe – Secure Multi File Upload for Contact Form 7 versions = 1.0.4...
CVE-2026-72209
In the Linux kernel, the following vulnerability has been resolved: ntfs: validate attribute values on lookup ntfsattrfind and ntfsexternalattrfind check that generic resident attribute values fit in their attribute records and that fixed-size resident values are large enough. For variable-length...
XAgent 路径遍历漏洞
XAgent is an open-source, experimental large language model-driven autonomous agent developed by OpenBMB. Version XAgent 1.0.0 contains a path traversal vulnerability, which stems from incorrect handling of the filename parameter in the workspace.py function of the XAgentServer/application/router...
CVE-2025-67720
Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the downloadmedia method before using them in file path construction. When downloading media, if the user does not specify a custom filename...