EUVD-2026-106403

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

CVE-2026-87362

The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Folders, Files & Attachments component in version 9.3.6 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unau...

CVE-2026-113606

Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...

EUVD-2026-105084

Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder at the server storage directory. Attackers can create a folder via POST /api/v1/processing-folders targeting storage/...

CVE-2026-113606

Stirling-PDF versions 3.0.0 through 3.2.0 are vulnerable to an authorization bypass (CWE-639) within the processing folders functionality. Authenticated users can access files belonging to other users by pointing a processing folder at the server storage directory via a POST /api/v1/processing-fo...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

LoLLMS WebUI - Subfolder Prediction via Path Traversal

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...

CVE-2026-112004

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...

EUVD-2026-103457

Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folderId. The PATCH /api/base/:baseId/node/folder/:folderId endpoint checks base|update only against the URL baseId, so...

CVE-2026-21986-VirtualBox-DoS

CVE-2026-21986 - VirtualBox Shared Folders Kernel Memory Exhaustion DoS Overview This repository contains a proof of concept and technical write-up for CVE-2026-21986, a denial-of-service vulnerability in Oracle VM VirtualBox. The issue exists in the Shared Folders driver interface and allows...

CVE-2026-70045

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally...

CVE-2026-70045

A Use after free vulnerability in Windows Work Folders allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high levels of confidentiality, integrity, and availability. An official fix is available, as indicated by the remediation level. No spe...

Windows Work Folders Elevation of Privilege Vulnerability

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally...

EUVD-2026-98081

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control...

PT-2026-112178

Name of the Vulnerable Software and Affected Versions Windows Work Folders affected versions not specified Description A use-after-free condition exists in Windows Work Folders, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

Microsoft Windows: CVE-2026-70045: Windows Work Folders Elevation of Privilege Vulnerability

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally...

CVE-2026-70045: Use After Free

Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally...

CVE-2026-17475

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control...

CVE-2026-17475 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control...

CVE-2026-17475

IBM Planning Analytics versions 2.0 and 2.1 are affected by a security vulnerability where a remote authenticated attacker can delete folders and applications belonging to other users. This is caused by improper functional level access control (CWE-285). The vulnerability has a High base severity...