148850 matches found
CVE-2026-21137
A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.
EUVD-2026-97201
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
CVE-2026-21137
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
EUVD-2026-97197
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...
CVE-2026-21133
A path traversal vulnerability exists in Samsung Flow prior to version 4.9.22.1 . This flaw allows local attackers to gain unauthorized access to clipboard data . No specific exploit information or additional remediation steps are provided in the documents beyond the indicated version update.
CVE-2026-87690 Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...
CVE-2026-87690 Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...
EUVD-2026-97177
The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...
CVE-2026-87690
The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...
CVE-2026-87690
The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is vulnerable to a relative path traversal (CWE-22). The module fails to sanitize file names from a Meterpreter directory listing—controlled by a hostile iOS device—when interpolating them into a local destination path fo...
flatpak: flatpak: Arbitrary write access as root via extra-data extraction
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...
CVE-2026-108791
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...
CVE-2026-108790
A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...
flatpak: flatpak: Arbitrary write access as root via extra-data extraction
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...
CVE-2026-108791 westboy CicadasCMS Template Management input TemplateController.input path traversal
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...
EUVD-2026-97162
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...
CVE-2026-108791 westboy CicadasCMS Template Management input TemplateController.input path traversal
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...
CVE-2026-108791
A path traversal vulnerability exists in westboy CicadasCMS (up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab) within the Template Management component. Specifically, the TemplateController.input function in the file /system/cms/template/input fails to properly sanitize the filePath argumen...