BIT-GHOST-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...

BIT-GHOST-2026-105676 Ghost: Path Traversal via Locale Setting

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

Exploit for Unrestricted Upload of File with Dangerous Type in Apache Struts

CVE-2024-53677 — Apache Struts 2 파일 업로드 경로 조작 → RCE 아파치 Strut...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Configuration Information Scanner This tool is used to scan Pterodactyl panel instances in an attempt to retrieve their database configuration information. By exploiting a specific path traversal vulnerability, sensitive configuration data of the panel can be...

EUVD-2026-98072

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

EUVD-2026-98070

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal...

EUVD-2026-98087

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable...

EUVD-2026-98169

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

EUVD-2026-98075

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths...

EUVD-2026-98158

Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback resolver in js.Build, js.Batch, and css.Build. Attackers can ship relative imports or symlinks pointing outside the proje...

EUVD-2026-98157

Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's import fallback. Attackers can ship stylesheets with relative, absolute, or symlinked @import or @use targets to...

EUVD-2026-98155

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

EUVD-2026-98083

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...

CVE-2026-19938

The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chansend in subsys/bluetooth/host/att.c documents and every other error exit implements the contract that on failure the caller retains ownership of the netbuf; the BTATTOPSIGNEDWRITECMD branch instead...

CVE-2026-108940

A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...

PT-2026-112578

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An absolute path traversal issue exists in the Windows Encrypting File System EFS. This allows an authorized attacker to elevate privileges over a network...

Microsoft .NET Framework: CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

SmartBear Collaborator Server 15.1.15101 DOORS Upload Path Traversal

SmartBear Collaborator Server version 15.1.15101 contains a post-authentication ZIP path traversal in DOORS review-file uploads that can write a Groovy Server Page into the webroot, leading to command execution. https://packetstorm.news/download/235398...

RainbowFish PacsOne Server 7.3.9 STOW-RS Path Traversal / Remote Code Execution

RainbowFish PacsOne Server version 7.3.9 contains an authenticated path traversal flaw in the DICOMweb STOW-RS store path that can write a DICOM object to a served PHP directory and execute it as the web server user. https://packetstorm.news/download/235397...

Apache Struts 2 6.3.0.2 Path Traversal / Shell Upload

Apache Struts 2 version 6.3.0.2 contains a path traversal flaw in the legacy file upload interceptor that permits JSP shell upload outside the intended upload directory. This proof of concept demonstrates remote code execution. https://packetstorm.news/download/235382...