CVE-2026-98255

A flaw was found in the Linux kernel. Its TCP Transmission Control Protocol fast-path processing logic fails to properly filter out-of-bounds acknowledgment ACK packets before validating them. A remote attacker could exploit this vulnerability by sending network packets with outdated ACK numbers,...

Exploit for Path Traversal in Apple Macos

A public, source-guided analysis of CVE-2026-84568 and CVE-2026...

CVE-2026-108585

argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...

EUVD-2026-96372

argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...

CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool

argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...

CVE-2026-108585

argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...

CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool

argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...

CVE-2026-108585

The argocd-mcp (Argo CD MCP Server) versions through 0.9.0 are vulnerable to a path traversal flaw within the delete_application tool. The root cause is the lack of validation on applicationName values, which allows MCP clients or prompt-injected models to use dot-segment sequences (e.g., ../repo...

CVE-2026-108585 argocd-mcp through 0.9.0 Path Traversal via delete_application Tool

argocd-mcp Argo CD MCP Server through 0.9.0 contains a path traversal vulnerability in the deleteapplication tool that allows MCP clients to reach unintended API endpoints via unvalidated applicationName values. Attackers or prompt-injected models can supply dot-segment values like ../repositorie...

Lippu Docx Reader Office Viewer App path traversal vulnerability

The Lippu Docx Reader Office Viewer App versions 1.4.5 and earlier have a path traversal vulnerability. This vulnerability arises from the operation on the parameter displayname in the function word.office.docxviewer.document.docx.reader.ViewTxt, which allows for path traversal. Attackers can...

CVE-2026-98379

A flaw was found in the Linux kernel's netfilter subsystem. An unprivileged local user can cause a Denial of Service DoS by triggering a system crash through a null pointer dereference an attempt to access invalid memory. This issue occurs during IPv6 reverse-path filtering when the kernel...

CVE-2026-108551

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

vulnerable-mcp-servers-lab

Laboratorio di server MCP vulnerabili Questo repository contiene implementazioni volutamente vulnerabili di server Model Context Protocol MCP sia locali che remoti. Ogni server risiede nella propria cartella e include un README.md dedicato con tutti i dettagli su cosa fa , come eseguirlo e come...

CVE-2026-104722 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticate...

CVE-2026-104722

The Listdom: AI-powered Business Directory with Classifieds Ads Listings WordPress plugin is vulnerable to arbitrary file deletion in versions up to and including 6.1.2 . The root cause is insufficient file path validation within the LSD_Menus_IX_CSV::import function, specifically involving the i...

CVE-2026-104722 Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix[file]' Parameter

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the LSDMenusIXCSV::import function in all versions up to, and including, 6.1.2 This makes it possible for authenticate...

CVE-2026-107321 W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import

The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce an effective file-type restriction on it, allowing users with the Author role or higher to plant content that, once an administrator runs the import, copies an arbitrary...

CVE-2026-107321

The W3 Total Cache WordPress plugin, in versions prior to 2.10.6 , is vulnerable to a path traversal flaw during the media-import process. The plugin fails to confine file copies to the document root and lacks effective file-type restrictions. This allows users with Author privileges or higher to...