PT-2026-107480

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

PT-2026-107328

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

PT-2026-107395

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

PT-2026-107429

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...

PT-2026-107581

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

PT-2026-107542

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25 Description Improper repository path validation in a scaffolder backend module allows an authenticated user who can execute an affected template and...

PT-2026-107570

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs pfcp xact local create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The...

PT-2026-107500

A path traversal vulnerability exists in the unzip http RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

VisiData VisiData unzip_http RemoteZipFile extract path traversal vulnerability

Summary A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability. Confirmed Vulnerable...

Linux Distros Unpatched Vulnerability : CVE-2026-106186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute...

PT-2026-107433

Path traversal of 'trusted jar paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted jar paths'. The startup flag 'trusted jar paths' references URIs for loading files from local or remote filesystems. Path...

CVE-2026-103360 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-69328

StorSvc يحمّل SprintCSP.dll بالاسم النسبي بصلاحيات SYSTEM. ضعها في دليل HKLM PATH قابل للكتابة من المستخدم، واحصل على SYSTEM. يتطلب دليلاً قابلاً للكتابة من المستخدم في HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\Path. لا يوجد أي منها على صورة نظيفة. مثبّتات الأدوات تضيفها...

CVE-2021-43798

usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: the following arguments are required: -H/--host example: python3 grafana-exploit.py --host إذا تمت قراءة الملف التعسفي بنجاح اعرض عنوان URL الخاص بالطلب وأمر curl +RequestURL...

cve-2026-87902-poc

CVE-2026-87902 — نواة ووردبريس: اجتياز مسار غير مُصادَق عليه في حل قوالب الصفحات تضمين ملف PHP محلي غير مُصادَق عليه في نواة ووردبريس عبر قيمة pagename مزدوجة الترميز — وتحت شروط نشر محددة، تنفيذ كود PHP بصلاحيات حساب خادم الويب. | ---|--- CVE| CVE-2026-87902 إشعار المورّد| GHSA-7hp8-65ch-5whp...

CVE-2026-106186

An uncontrolled search path element flaw was found in the CredentialProvider component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522557469...

CodePath_Week_7-8

CodePath الأسبوع 7-8 واجب CodePath للأسبوعين 7 و8: CVE-2017-14719, CVE-2019-9787 وتعديل محتوى الصفحات/المقالات بدون مصادقة عبر REST API المشروع 7 - اختبار اختراق WordPress الوقت المستغرق: 16 ساعة في المجمل الهدف: العثور على الثغرات الأمنية التي تؤثر على إصدار قديم من WordPress وتحليلها وإعادة...

CVE-2026-106491

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...

CVE-2026-106493

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106486

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...