The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

EUVD-2026-95336

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-82900

IBM Guardium Data Protection versions 12.2.2 and 12.1 are affected by a vulnerability that could allow a remote attacker to delete arbitrary files. This issue is caused by an improper limitation of a pathname to a restricted directory (CWE-22). The impact is characterized by high consequences for...

Samsung MagicINFO 9 Server - File Upload & Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. id: CVE-2025-4632 info: name: Samsung MagicINFO 9 Server - File Upload & Remote Code Execution author: s4e-i...

CVE-2022-37706

CVE-2022-37706 익스플로잇: Enlightenment v0.25.3 권한 상승 설명 이 저장소는 CVE-2022-37706 에 대한 익스플로잇을 포함합니다. 이는 Enlightenment v0.25.3 및 이전 버전의 로컬 권한 상승 취약점입니다. 이 취약점은 SUID-root로 기본 설정된 enlightenmentsys 바이너리에서 /dev/.. 하위 문자열로 시작하는 경로명을 부적절하게 처리하여 발생합니다. 이 동작을 악용하여 공격자는 루트로 임의의 명령을 실행할 수 있으며, 결과적으로 시스템 전체를 제어할 수...

EUVD-2026-94130

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-93448

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-103360

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

EUVD-2026-94111

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-93448

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a vulnerability that allows a remote authenticated attacker to obtain sensitive information . This is caused by an improper limitation of a pathname to a restricted directory (CWE-22). No specific remediation or exploit details are pr...

CVE-2026-93448 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

PT-2026-107321

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

CVE-2026-103360

IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Path Traversal vulnerability (CWE-22 ). A remote authenticated attacker can exploit the improper limitation of a pathname to a restricted directory to obtain sensitive information . To remediate this issue, IBM strongly recommends u...

CVE-2026-103360 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

DEBIAN-CVE-2026-105842

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

CVE-2026-105842 lrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() Pathname

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

CVE-2026-105842

The lrzsz utility (versions before 0.13.0 ) is vulnerable to a heap-based buffer overflow within the procheader() function of the lrz receive utility. The flaw occurs when the utility copies overlong, sender-supplied filenames (up to 8192 bytes) into Pathname . Specifically, the overflow is trigg...

CVE-2026-105842 lrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() Pathname

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf in pipe mode or strcpy...

CVE-2026-63266: Improper Limitation of a Pathname to a Restricted Directory

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2024-32113-Exploit

CVE-2024-32113 エクスプロイト Apache OFBiz パストラバーサルからRCEへのエクスプロイト。 説明 CVE-2024-32113 は、Apache OFBiz においてリモートコード実行（RCE）につながるパストラバーサル脆弱性です。 脆弱性 : Apache OFBiz における、パス名を制限ディレクトリに適切に制限できない脆弱性（'パストラバーサル'）。 影響を受けるバージョン : Apache OFBiz 18.12.13 より前 解決策 : バージョン 18.12.13 にアップグレードしてください。 使用方法 ./exploit.py IP:PORT ...