net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2026-106186

Google Chrome on Windows versions prior to 155.0.8059.39 is affected by an uncontrolled search path element in the CredentialProvider component. This vulnerability (CWE-427) allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. While the Chromium s...

cve-2025-48384-poc

PoC لثغرة CVE-2025-48384 يُظهر هذا المفهوم الإثباتي PoC ثغرة سوء تحليل مسار CR في الوحدات الفرعية submodules في Git، الأمر الذي يؤدي إلى تنفيذ تعسفي للخطافات hooks أثناء git clone --recurse-submodules. ⚠️ تحذير هذا لأغراض تعليمية واختبارية فقط. لا تشغّله على أي بيئة إنتاج. 🧪 الاستخدام git clone...

Exploit for CVE-2026-21589

CVE-2026-21589 - Atlassian Data Center Una...

CVE-2026-31156

CVE-2026-31156 OpenPLC-v3 में एक पथ इंजेक्शन भेद्यता है, जो प्रोग्राम द्वारा कमांड लाइन से पास किए गए फ़ाइल पथ मापदंडों पर कोई वैधता जाँच न करने से उत्पन्न होती है। हमलावर दुर्भावनापूर्ण पथ बनाकर किसी भी पढ़ने योग्य फ़ाइल को पढ़ सकते हैं, जिससे सूचना लीक होने का जोखिम होता है। भेद्यता प्रकार अनुच...

CVE-2026-106103

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

EUVD-2026-93778

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-86360

Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2024-6648

CVE-2024-6648 قالب Nuclei لـ CVE-2024-6648، اجتياز المسار المطلق في إضافة Prestashop ApPage Builder. الاستخدام: nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-71168

Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...

EUVD-2026-93774

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

npm-tar-path-traversal-scanner

CVE-2026-31802 — ماسح اجتياز المسار في npm tar يكتشف حزم npm المتأثرة بـ CVE-2026-31802 ، وهي ثغرة اجتياز مسار في حزمة tar الخاصة بـ npm تسمح بكتابة ملفات عشوائية أثناء استخراج الأرشيف. الميزات يفحص package-lock.json بحثًا عن إصدارات tar المتأثرة يتحقق من nodemodules بحثًا عن الحزم المتأثرة المثب...

CVE-2023-31747

Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: الإصدارات = wmic service get name,pathname,displayname,startmode |...