CVE-2026-101322

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's Authorization header to outgoing requests without checking the destination origin. In deployments using authentication, an attacker could induce a us...

EUVD-2026-90890

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's Authorization header to outgoing requests without checking the destination origin. In deployments using authentication, an attacker could induce a us...

CVE-2026-101322

Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924 are vulnerable to an authorization header leakage due to a shared request handler that attaches the Authorization header to outgoing requests without verifying the destination origin. An attacker can trick a user into c...

CVE-2026-101322

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's Authorization header to outgoing requests without checking the destination origin. In deployments using authentication, an attacker could induce a us...

CVE-2026-101322

In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's Authorization header to outgoing requests without checking the destination origin. In deployments using authentication, an attacker could induce a us...

SUSE CVE-2026-103263

Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays within it. When a symlink pointing outside the static directory exists inside it, unauthenticated attackers can request...

EUVD-2026-57809

SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem...

GHSA-HF8H-97GM-4X2P SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem

Summary /api/file/getUniqueFilename takes a path from the request body and passes it to a filesystem existence check with no validation, confinement or authorization. The response distinguishes paths that exist from paths that do not, so an anonymous reader in publish mode can probe arbitrary...

SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem

Summary /api/file/getUniqueFilename takes a path from the request body and passes it to a filesystem existence check with no validation, confinement or authorization. The response distinguishes paths that exist from paths that do not, so an anonymous reader in publish mode can probe arbitrary...

SUSE-SU-2026:4411-1 Security update for python

This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. - CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. - CVE-2026-15806:...

EUVD-2026-89338

JupyterLab: Cross-site scripting XSS in JupyterLab via notebook cells pasted from the system clipboard...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2024-58388

Sharp (and Toshiba Tec rebranded) multifunction printers are vulnerable to an unauthenticated local file inclusion vulnerability. By manipulating the path parameter in the installed_emanual_down.html endpoint, remote attackers can use directory traversal sequences (e.g., path=/manual/../../../) t...

CVE-2024-58388

...

EUVD-2024-55780

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

CVE-2021-43798-EXPLOIT

CVE-2021-43798 - Grafana Directory Traversal 🔍 Grafana is an open-source platform for monitoring and observability. Versions 8.0.0-beta1 through 8.3.0 except for patched versions are vulnerable to a directory traversal attack, allowing unauthorized access to local files. This vulnerability does n...

CVE-2018-18778

CVE-2018-18778 - ACME minihttpd Arbitrary File Read CVE-2018-18778 is a security vulnerability affecting ACME minihttpd a lightweight web server. The vulnerability allows remote attackers to read arbitrary files on the server. It was publicly disclosed in October 2018 and impacts versions of...

CVE-2021-42013-EXPLOIT

🚨 CVE-2021-42013 - Apache 2.4.49 & 2.4.50 Remote Code Execution 🚨 CVE-2021-42013 builds upon the previously identified vulnerability, CVE-2021-41773. Despite the Apache team's efforts to address CVE-2021-41773 in version 2.4.50, subsequent investigations revealed that the fix fell short of fully...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

Relative Path Traversal

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Relative Path Traversal via improper input validation in the admin iframe, which allows an attacker with content publishing privileges to craft malicious pages that, when visited by an active staff user,...