PT-2026-107395

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

CVE-2026-105840

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz...

The vulnerability of TeamViewer’s software for remote control of a computer lies in its improper handling of external names or file paths, allowing attackers to execute arbitrary code.

The vulnerability of TeamViewer’s remote control software lies in improper external control of the username or file path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-107570

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs pfcp xact local create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The...

PT-2026-107501

A path traversal vulnerability exists in the EmailSheet extract parts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrom...

PT-2026-107581

Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...

Linux Distros Unpatched Vulnerability : CVE-2026-106186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute...

PT-2026-107500

A path traversal vulnerability exists in the unzip http RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

PT-2026-107542

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-confluence-to-markdown versions prior to 0.3.25 Description Improper repository path validation in a scaffolder backend module allows an authenticated user who can execute an affected template and...

PT-2026-107429

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...

PT-2026-107433

Path traversal of 'trusted jar paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted jar paths'. The startup flag 'trusted jar paths' references URIs for loading files from local or remote filesystems. Path...

PT-2026-107511

Update: Since the original post, 20 additional Langflow CVEs have been published, including several high- and critical-severity vulnerabilities affecting versions up to 1.12.2. The newly disclosed issues cover a range of impact areas, including remote code execution, command injection,...

VisiData VisiData unzip_http RemoteZipFile extract path traversal vulnerability

Summary A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability. Confirmed Vulnerable...

VisiData VisiData EmailSheet extract_parts path traversal vulnerability

Summary A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versio...

CVE-2026-103360 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-69328

StorSvc carga SprintCSP.dll por nombre relativo como SYSTEM. Colócala en un directorio PATH de HKLM con permisos de escritura para el usuario y obtén SYSTEM. Requiere un directorio con permisos de escritura para el usuario en HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\Path...

CVE-2021-43798

uso: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: los siguientes argumentos son requeridos: -H/--host ejemplo: python3 grafana-exploit.py --host si se lee exitosamente un archivo arbitrario muestra la URL de la solicitud y el comando curl +RequestURL...

cve-2026-87902-poc

CVE-2026-87902 — WordPress Core: ページテンプレート解決における未認証パストラバーサル WordPress Core における未認証のローカル PHP ファイルインクルード。二重エンコードされた pagename 値を通じて発生し、特定のデプロイ条件下では Web サーバーアカウントの権限で PHP コードが実行される。 | ---|--- CVE| CVE-2026-87902 ベンダーアドバイザリ| GHSA-7hp8-65ch-5whp 解説記事| CVE-2026-87902: Critical WordPress file inclusion a...

CVE-2026-106186

An uncontrolled search path element flaw was found in the CredentialProvider component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522557469 https://code.google.com/p/chromium/issues/detail?id=106186...