CVE-2026-108902

The pH7Builder (pH7 Social Dating CMS) software before version 18.5.0 is vulnerable to a path traversal vulnerability within the picture module 's deletePhoto() action. An authenticated member can exploit this by supplying ../ sequences in the POST picture_link parameter to delete arbitrary files...

CVE-2026-108902 pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link

pH7Builder pH7 Social Dating CMS before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto action that allows authenticated members to delete arbitrary files. Attackers can supply ../ sequences in the POST picturelink parameter to remove other members' photos or...

CVE-2026-108725

Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allows authenticated users to upload HTML files via POST /uploads without type restrictions. Attackers can send the public GET /uploads/path URL to a signed-in victim, executing...

CVE-2026-108716

mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens without enforcing HTTPS endpoints. When discovered device authorization and token endpoints are non-loopback http URLs, on-path network attacker...

CVE-2026-108716

The mcp-remote library, versions 0.8.0 through 0.14.3 , is vulnerable to a cleartext transmission flaw within the authorizeWithDeviceCode function. The root cause is the failure to enforce HTTPS endpoints when handling device authorization and token endpoints. If these endpoints are non-loopback ...

rbuster

Rbuster otro rastreador de directorios Opciones comunes de línea de comandos -a - especificar una cadena de agente de usuario para enviar en la solicitud -c - usar esto para especificar cualquier cookie que pueda necesitar simulando autenticación. encabezado. -f - forzar el procesamiento de un...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-59310-POC

CVE-2026-59310 — VMware vCenter Syslog Directory Traversal Leading to Unauthenticated RCE Disclaimer : This project is intended solely for authorized security testing, vulnerability verification, and defensive research. Please use it only in environments where you have obtained explicit written...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

EUVD-2026-96870

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567

A path traversal vulnerability exists in InstantSoft icms2 (up to version 2.18.2) within the Image Handler component. Specifically, the files_delete_file function in the file system/fields/image.php file is susceptible to exploitation through manipulation of the argument size. This flaw can be tr...

prefetch-hash-cracker

Cracker de Hash de Prefetch Motivación Durante el análisis forense de una máquina Windows, es posible que encuentres el nombre de un archivo prefetch eliminado. Aunque su contenido puede no ser recuperable, el nombre del archivo en sí suele ser suficiente para encontrar la ruta completa del...

CVE-2026-108543

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...

CVE-2026-108544

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element in the NTGhostscriptEXE process. An attacker can execute arbitrary code by placing a malicious gswin64c.exe in the working directory and triggering the conversion of PDF, PostScript, or EPS files...

Uncontrolled Search Path Element

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Uncontrolled Search Path Element

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...