CVE-2026-77262

CVE-2026-77262 — Lecture arbitraire de fichiers dans mcp-atlassian via confluenceuploadattachment Sévérité : Élevée CVSS 8.6 CWE : CWE-22 — Traversée de chemin Version affectée : sooperset/mcp-atlassian 0.22.0 Corrigé dans : 0.22.0 Avis de sécurité : GHSA-p6hp-93wp-fh6p NVD :...

CVE-2026-28995

CVE-2026-28995 إثبات المفهوم لـ CVE-2026-28995 — ثغرة اجتياز المسار في App Intents على iOS 26.4.2 والإصدارات الأقدم. الوصف تسمح هذه الثغرة لتطبيق ضار بـ قراءة أي ملف خارج حمايته sandbox عبر App Intents. السبب الجذري هو التحقق غير الكافي من المسار في إطار عمل App Intents من Apple. الإصدارات...

EUVD-2026-92815

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocumentbackend.py uses the xlink:href attribute value of a draw:image element as a filesystem path when the referenced pa...

CVE-2026-105751 Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocumentbackend.py uses the xlink:href attribute value of a draw:image element as a filesystem path when the referenced pa...

CVE-2026-105748

The Docling library (versions 2.16.0 through 2.131.0 ) is vulnerable because the InputFormat.JSON_DOCLING backend fails to reject picture image references containing local paths or file URIs during serialized DoclingDocument input validation. When processing with ImageRefMode.EMBEDDED , the Docli...

CVE-2026-105748 Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile traversée de chemin Reproducteurs de preuve de concept exécutables pour la même vulnérabilité Apache Camel, un par environnement d'exécution : Runtime| Répertoire| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...

CVE-2025-60876

CVE-2025-60876: إصلاح ثغرة حقن طلب الهدف في busybox wget إصلاح يحافظ على السلوك لثغرة CVE-2025-60876، وهي ثغرة حقن في رأس HTTP في wget من BusyBox، بالإضافة إلى إثبات المفهوم الذي يوضحها والمواد اللازمة لتقديم الإصلاح إلى المصدر الرئيسي لـ BusyBox. الثغرة يقوم wget من BusyBox بنسخ مسار URL...

CVE-2026-102262

Newell Brands DYMO ID version 1.5.1.71 is vulnerable to a path traversal issue due to improper spheres of control. The software resolves its plugin Modules directory relative to the process working directory. An attacker can place a malicious job file and DLLs in a directory, then set the process...

CVE-2026-102262 Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-105766

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2024-25293

إثبات مفهوم لتنفيذ كود محلي في MJML إثبات مفهوم لثغرة CVE-2024-25293. تم اكتشاف أن التطبيق mjml-app في الإصدارين v3.0.4 و 3.1.0-beta يحتوي على ثغرة تنفيذ كود عن بُعد RCE. يحتوي هذا المستودع على تطبيق ضعيف كمثال واستغلال لإثبات المفهوم POC. يوجد في هذا المستودع ملف بايثون يعمل على أتمتة العملية. 1...

CVE-2021-41773-Apache-2.4.49-

CVE-2021-41773-Apache-2.4.49- اختبار الاختراق 1.1. Path Traversal قراءة ملف /etc/passwd !/bin/bash Script: exploitpathtraversal.sh Mục tiêu: Đọc tệp /etc/passwd từ Apache 2.4.49 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ Khai thác Path...

CVE-2026-59310

CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2026-105766

The Chainguard Academy (edu) website is vulnerable to an HTTPS to HTTP downgrade attack due to the use of the backend-facing $scheme variable in the nginx.conf trailing-slash directory redirect. This issue exists in versions from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

ninja-form-exploit

ninja-form-exploit CVE-2026-0740 — Многопоточный сканер уязвимостей для обхода пути загрузки файлов в Ninja Forms на WordPress. Описание main.py сканирует список целей WordPress, чтобы определить, уязвим ли плагин Ninja Forms File Uploads для CVE-2026-0740. Краткий алгоритм: 1. Нормализация URL...

CVE-2026-105683

The Ghost Node.js content management system is vulnerable to a path traversal vulnerability (CWE-35) in the ImageSize Service . Affected versions range from 6.14.0 until 6.27.0 . Due to an input validation issue, authenticated staff users could access local files outside of the intended data stor...

CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...