VisiData VisiData EmailSheet extract_parts path traversal vulnerability

Summary A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versio...

VisiData VisiData unzip_http RemoteZipFile extract path traversal vulnerability

Summary A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability. Confirmed Vulnerable...

PT-2026-107500

A path traversal vulnerability exists in the unzip http RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

PT-2026-107542

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25 Description Improper repository path validation in a scaffolder backend module allows an authenticated user who can execute an affected template and...

The vulnerability of TeamViewer’s software for remote control of a computer lies in its improper handling of external names or file paths, allowing attackers to execute arbitrary code.

The vulnerability of TeamViewer’s remote control software lies in improper external control of the username or file path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-105840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files...

PT-2026-107511

Update: Since the original post, 20 additional Langflow CVEs have been published, including several high- and critical-severity vulnerabilities affecting versions up to 1.12.2. The newly disclosed issues cover a range of impact areas, including remote code execution, command injection,...

CVE-2026-105840

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz...

Linux Distros Unpatched Vulnerability : CVE-2026-106186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute...

CVE-2026-103360 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-69328

StorSvc は SprintCSP.dll を相対名で SYSTEM として読み込む。ユーザー書き込み可能な HKLM PATH ディレクトリに配置すれば SYSTEM を取得できる。 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\Path にユーザー書き込み可能なディレクトリが必要。 クリーンなイメージには存在しない。ツールのインストーラーが追加する（%USERPROFILE%.cargo\bin、.local\bin、Python...

CVE-2021-43798

사용법: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: 오류: 다음 인수가 필요합니다: -H/--host 예: python3 grafana-exploit.py --host 임의 파일 읽기에 성공한 경우 요청 URL과 curl 명령어를 표시합니다 +요청 URL http://example.host/public/plugins/loki/../../../../../../../../../../../../../etc/passwd +curl 명령어 curl --path-as-is...

cve-2026-87902-poc

CVE-2026-87902 — WordPress Core: ページテンプレート解決における未認証パストラバーサル WordPress Core における未認証のローカル PHP ファイルインクルード。二重エンコードされた pagename 値を通じて発生し、特定のデプロイ条件下では Web サーバーアカウントの権限で PHP コードが実行される。 | ---|--- CVE| CVE-2026-87902 ベンダーアドバイザリ| GHSA-7hp8-65ch-5whp 解説記事| CVE-2026-87902: Critical WordPress file inclusion a...

CVE-2026-106186

An uncontrolled search path element flaw was found in the CredentialProvider component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522557469 https://code.google.com/p/chromium/issues/detail?id=106186...

CodePath_Week_7-8

CodePath 第7-8周 CodePath 第7 & 8 周作业：CVE-2017-14719、CVE-2019-9787 以及通过 REST API 进行未认证的页面/文章内容修改 项目 7 - WordPress 渗透测试 花费时间：总共 16 小时 目标：查找、分析、复现并记录影响旧版 WordPress 的漏洞 渗透测试报告 1. CVE-2017-14719 摘要：在文件解压代码中发现了一个路径遍历漏洞。 漏洞类型：路径遍历 测试版本：3.8 修复版本：3.8.22 -...

CVE-2026-106493

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106491

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...

CVE-2026-106486

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...

CVE-2026-86684 Gitea push mirror local path check uses the repository owner

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORTLOCALPATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-86684

An improper authorization check in the Gitea push mirror API allows an authenticated repository administrator to bypass local file system access restrictions. When the [security] IMPORT_LOCAL_PATHS = true setting is enabled, an administrator who lacks permission to import local paths can configur...