CVE-2026-8920

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file operations by sending crafted commands containing an arbitrary file path and bypassing the service’s path restrictions . On...

EUVD-2026-44586

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a local user to perform file operations by sending crafted commands containing an arbitrary file path and bypassing the service’s path restrictions . On...

CVE-2026-8919

Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application’s local service endpoint. This can result in...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the ArchiveExtract function in cmd/archive/extract/extract.go, which strips only a leading ./ from archive entry paths and joins them to the destination with path.Join without removing .. components. An attacker c...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the ArchiveExtract function in cmd/archive/extract/extract.go, which strips only a leading ./ from archive entry paths and joins them to the destination with path.Join without removing .. components. An attacker c...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal allowing authorization bypass in the checkPrivate and WithRemote middleware in cmd/serve/restic/restic.go, where checkPrivate authorizes on the routed userID segment while WithRemote builds the backend object key fro...

Exploit for CVE-2026-55511

CVE-2026-55511 PoC Non-weaponized proof of concept for a Yamc...

EUVD-2026-44524

CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must...

EUVD-2026-44560

Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed...

PT-2026-60325

Name of the Vulnerable Software and Affected Versions Qinglong versions prior to 2.20.1 Description An authentication bypass exists in the init guard middleware located in back/loaders/express.ts. The system validates the /api/user/init endpoint but fails to check /open/user/init. Because the...

PT-2026-58886

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts with against the expected backup directory without path normalization, allowing parent-directory sequences during snapshot-mode...

CVE-2026-38974

Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...

PT-2026-60310

Name of the Vulnerable Software and Affected Versions Node Version Manager nvm versions 0.32.1 through 0.40.5 Description An issue exists where nvm ls-remote and other commands that refresh remote LTS aliases, such as nvm install --lts, parse the node.js mirror's index.tab and use the LTS codenam...

PT-2026-60234

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.1 Splunk Enterprise versions prior to 10.2.5 Splunk Enterprise versions prior to 10.0.8 Splunk Enterprise versions prior to 9.4.13 Splunk Enterprise versions prior to 9.3.14 Splunk Cloud Platform versio...

PT-2026-58888

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The WinGup decompress function fails to perform canonical containment validation when joining untrusted ZIP entry names to unzipDestTo. This allows a specially crafted ZIP entry, such as...

Adobe Experience Manager 6.5.0 < 6.5.2 / 2026.5.0 < 2026.6.0 Multiple Vulnerabilities (APSB26-74)

The version of Adobe Experience Manager installed on the remote host is prior to 2026.6.0, 6.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-74 advisory. - Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Director...

PT-2026-60214

Name of the Vulnerable Software and Affected Versions File Browser versions 2.63.6 through 2.63.16 Description The archive builder improperly handles filenames by using strings.ReplaceAllnameInArchive, "", "/". This allows a user with upload permissions to create a file with backslashes in the...

Splunk Enterprise 9.3.0 < 9.3.14, 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0703)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0703 advisory. - In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...

Linux Distros Unpatched Vulnerability : CVE-2026-59733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --private-rep...

PT-2026-60383

Name of the Vulnerable Software and Affected Versions Koel versions prior to 9.7.1 Description An authenticated user can perform Server-Side Request Forgery SSRF by supplying a URL that redirects to an internal address or by using DNS rebinding to change a public resolution to a private one. The...