147939 matches found
CVE-2026-108811 WMCMS index.php information disclosure
A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...
EUVD-2026-97284
A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...
CVE-2026-108811 WMCMS index.php information disclosure
A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes information disclosure. The attack is possible to be carried out remotely. The exploit has been made available to the public a...
EUVD-2026-97265
A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating syste...
CVE-2026-78355
A path traversal vulnerability exists in the OTRS SendSupportBundle functionality, allowing an authenticated administrator to reference file paths outside the intended directory. This flaw enables the deletion of files accessible to the OTRS application process, subject to operating system file p...
CVE-2026-78355 Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory
A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating syste...
CVE-2026-78355 Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory
A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible to the OTRS application process to be deleted. The vulnerability does not bypass operating syste...
CVE-2026-87690
The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...
CVE-2026-21137
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
CVE-2026-21137
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
CVE-2026-21137
A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.
EUVD-2026-97201
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
CVE-2026-21137
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
CVE-2026-21133
A path traversal vulnerability exists in Samsung Flow prior to version 4.9.22.1 . This flaw allows local attackers to gain unauthorized access to clipboard data . No specific exploit information or additional remediation steps are provided in the documents beyond the indicated version update.
EUVD-2026-97197
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
CVE-2026-87690
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is vulnerable to a relative path traversal (CWE-22). The module fails to sanitize file names from a Meterpreter directory listing—controlled by a hostile iOS device—when interpolating them into a local destination path fo...
CVE-2026-87690 Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...