EUVD-2026-92815

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocumentbackend.py uses the xlink:href attribute value of a draw:image element as a filesystem path when the referenced pa...

CVE-2026-105748 Docling: Crafted DoclingDocument JSON embeds local image files into converted output

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...

CVE-2026-105748

The Docling library (versions 2.16.0 through 2.131.0 ) is vulnerable because the InputFormat.JSON_DOCLING backend fails to reject picture image references containing local paths or file URIs during serialized DoclingDocument input validation. When processing with ImageRefMode.EMBEDDED , the Docli...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile traversée de chemin Reproducteurs de preuve de concept exécutables pour la même vulnérabilité Apache Camel, un par environnement d'exécution : Runtime| Répertoire| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot...

CVE-2025-60876

CVE-2025-60876: Correction de l'injection request-target dans busybox wget Un correctif préservant le comportement pour CVE-2025-60876, une vulnérabilité d'injection d'en-tête HTTP dans BusyBox wget, ainsi que la preuve de concept qui la démontre et les artefacts pour soumettre le correctif en...

CVE-2026-102262

Newell Brands DYMO ID version 1.5.1.71 is vulnerable to a path traversal issue due to improper spheres of control. The software resolves its plugin Modules directory relative to the process working directory. An attacker can place a malicious job file and DLLs in a directory, then set the process...

CVE-2026-102262 Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-105766

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2024-25293

Preuve de concept d'exécution de code locale MJML Une preuve de concept pour la vulnérabilité CVE-2024-25293. mjml-app v3.0.4 et 3.1.0-beta a été découvert comme contenant une exécution de code à distance RCE Dans ce dépôt se trouve un exemple d'application vulnérable et un exploit de preuve de...

CVE-2021-41773-Apache-2.4.49-

CVE-2021-41773-Apache-2.4.49- Test d'intrusion 1.1. Path Traversal Lecture du fichier /etc/passwd !/bin/bash Script: exploitpathtraversal.sh Mục tiêu: Đọc tệp /etc/passwd từ Apache 2.4.49 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ Khai thác...

CVE-2026-59310

CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2026-105766

The Chainguard Academy (edu) website is vulnerable to an HTTPS to HTTP downgrade attack due to the use of the backend-facing $scheme variable in the nginx.conf trailing-slash directory redirect. This issue exists in versions from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

ninja-form-exploit

ninja-form-exploit CVE-2026-0740 — Scanner de vulnérabilités multi-thread pour le problème de traversée de chemin path traversal de l'upload de fichiers Ninja Forms sur WordPress. Description main.py scanne une liste de cibles WordPress pour déterminer si le plugin Ninja Forms File Uploads est...

CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...

CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...

CVE-2026-105683 Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...

CVE-2026-105683

The Ghost Node.js content management system is vulnerable to a path traversal vulnerability (CWE-35) in the ImageSize Service . Affected versions range from 6.14.0 until 6.27.0 . Due to an input validation issue, authenticated staff users could access local files outside of the intended data stor...

best-CVE-2025-8088

Exploit WinRAR CVE-2025-8088 🔓 Un exploit de preuve de concept pour la vulnérabilité WinRAR CVE-2025-8088 affectant les versions 7.12 et inférieures. Cet outil crée une archive RAR malveillante qui intègre des charges utiles dans des flux de données alternatifs ADS avec une traversée de chemin,...