Exploit for Path Traversal in Apache Http_Server

AI 오케스트레이션 기반 CVE 분석 — CVE-2021-41773 AI에게 CVE 분석을 시키고, A...

CVE-2026-67422 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-9XWG-3R6F-JCX2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-61632 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-12061 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59936 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-55H5-XMCQ-C37V vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-FG7F-2386-8897 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-59935 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-5XF7-4P34-54QR vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-44763

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on condition...

EUVD-2025-210676

The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to...

EUVD-2026-55863

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on condition...

PT-2026-70879

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in...

PT-2026-70337

Name of the Vulnerable Software and Affected Versions gaudi-container-runtime versions prior to 1.24.0 Description A path traversal issue exists within Ring 3: User Applications, which may allow an authenticated, unprivileged software adversary to escalate privileges. This can occur via local...

PT-2026-70103

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A path traversal vulnerability exists in the Offline archives functionality of the local web interface. This issue occurs because of insufficient validation of a...

PT-2026-70146

Name of the Vulnerable Software and Affected Versions AsyncFuncAI deepwiki-open versions prior to commit 16f35a0 Description A path traversal issue allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths. This occurs via the 'local-repository structure'...

PT-2026-70666

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...

PT-2026-70023

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence affected versions not specified Description Insufficient file path validation in certain functions allows a privileged attacker to use specially crafted input to write files outside the intended...

PT-2026-70890

DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user id HTTP header of the Python file-upload endpoint. Attackers can send a crafted...