147892 matches found
PT-2026-108835
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...
CVE-2026-75352
The OpENer v2.3/commit 76b95cf software is affected by an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . A remote attacker can exploit this flaw by sending specially crafted network requests, which can cause the service to crash and result ...
CVE-2026-94666: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...
CVE-2026-107935: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
CVE-2026-75351: Out-of-bounds Read
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...
CVE-2026-103412: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...
CVE-2026-104081: Improper Limitation of a Pathname to a Restricted Directory
KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename function within app/function/helper.function.php, where a single non-recursive strreplace sanitization pass can be bypassed using crafted filenames like "....//", combined with PclZip's extract call in...
CVE-2026-108156: External Control of File Name or Path
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation...
Node.js 8.5.0 Path Traversal
Node.js version 8.5.0 contains a path traversal vulnerability in path normalization that allows an Express static-file server to disclose files outside its static directory. https://packetstorm.news/download/234994...
PT-2026-108833
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0...
PT-2026-109303
Name of the Vulnerable Software and Affected Versions Contao versions prior to 5.3.50 Contao versions prior to 5.7.12 Description An issue exists where the ImagesController joins the user-controlled path parameter to the configured image target directory using Path::join without utilizing...
Elastic Agent 8.19.13 < 8.19.22 / 9.2.7 <= 9.2.8 / 9.3.x <= 9.3.8 / 9.4.x < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-194)
The version of Elastic Agent / Elastic Endpoint installed on the remote Windows host is 8.19.13 through 8.19.21, or 9.2.7 through 9.2.8, or 9.3.x through 9.3.8, or 9.4.x prior to 9.4.8, or 9.5.x prior to 9.5.5. It is, therefore, affected by a denial of service vulnerability as referenced in the...
Linux Distros Unpatched Vulnerability : CVE-2026-41958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip...
CVE-2026-75353
OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service...
CVE-2026-75345: Uncontrolled Resource Consumption
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...
PT-2026-108968
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...
uWSGI 2.0.16 PHP Plugin Path Traversal
uWSGI version 2.0.16 PHP plugin contains a path traversal vulnerability that permits reading files outside the configured document root through URL-encoded ../ sequences. This proof of concept provides a vulnerable Docker environment and request example. https://packetstorm.news/download/234966...
Ruby on Rails 5.0.7 Sprockets Path Traversal
Ruby on Rails version 5.0.7 with Sprockets 3.7.1 contains a path traversal vulnerability that permits reading files outside allowed asset paths. The proof of concept demonstrates the issue. https://packetstorm.news/download/234984...
PT-2026-108808
Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, exists in the software. A high privileged attacker with local...
CVE-2026-78340: Improper Limitation of a Pathname to a Restricted Directory
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code executio...