W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write

W3 Total Cache WordPress plugin 2.10.5 contains an unrestricted file write vulnerability caused by improper validation of request paths used for cache file names, letting unauthenticated attackers overwrite files including .htaccess, exploit requires no authentication. id: CVE-2026-18051 info:...

Feast Feature Server <=0.58.0 - Arbitrary File Read

Feast the open-source Feature Store Feature Server through 0.58.0 exposes an unauthenticated POST /read-document endpoint that reads an arbitrary, caller-supplied file path with no authentication and no path validation. The readdocumentendpoint handler passes the JSON filepath field straight to...

Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software WhatsUp Gold. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of GetFileWithoutZip method. The issue results from th...

CVE-2026-17437

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.29 are vulnerable to an arbitrary file write vulnerability (CVE-2026-17437 ). The root cause is the improper validation of pathnames during archive extraction, which falls under CWE-22 (Path Traversal). A l...

PT-2026-140105

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to perform an arbitrary file write due to improper validation of pathnames during archive extraction...

CVE-2025-56499

CVE-2025-56499 Arbitrary File Read via Missing Path Validation in Local Rule Provider Upstream Fix: https://github.com/MetaCubeX/mihomo/pull/2177 Affected Versions: mihomo = v1.19.11 Summary When parsing rule-providers configuration, the type = "file" branch fails to validate the supplied path. A...

red-tldr

Red Team TL;DR English | 中文简体 What is Red Team TL;DR? red-tldr is a lightweight red team command lookup tool. It helps experienced red team operators quickly find the commands, techniques, and key points they need — like a man command built for offensive security. Starting from v0.5.0, red-tldr...

CVE-2021-45010

CVE-2021-45010 🐍 Contrived Python PoC Exploit for CVE-2021-45010. Tiny File Manager 2.4.7 Usage usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME Username -p...

CVE-2026-16718

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths...

CVE-2026-16718 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths...

CVE-2026-16718

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are impacted by multiple vulnerabilities. A remote authenticated attacker could obtain sensitive information due to improper validation of file paths (CWE-22). The CVSS 3.1 base score is 7.7, reflecting a HIGH sever...

GitPython: GitPython: arbitrary code execution via improper submodule path validation

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script...

GitPython: GitPython: arbitrary code execution via improper submodule path validation

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script...

GitPython: GitPython: arbitrary code execution via improper submodule path validation

A flaw was found in GitPython. This vulnerability allows an attacker to achieve arbitrary code execution by supplying an untrusted submodule path. Because the library fails to properly validate destination paths before cloning repository data, an attacker can plant a malicious executable script...

CVE-2026-118422

The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its same-origin proxy's upstream endpoint, allowing unauthenticated visitors to redirect the server-side request to an arbitrary host and have the response body and its content type returned fr...

EUVD-2026-116632

Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Quest Foglight for Databases. Authentication is required to exploit this...

EUVD-2026-116640

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this...

CVE-2026-92189

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this...

CVE-2026-92189: Quest Foglight for Databases: Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution…

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this...

CVE-2026-92189

The Quest Foglight for Databases software is vulnerable to Remote Code Execution (RCE) due to a flaw in the writeTopologySectionToFile method. The root cause is the lack of proper validation of a user-supplied path prior to use in file operations (CWE-73). This vulnerability allows remote attacke...