CVE-2026-87690-POC-Metasploit-Dir-Traverse-to-RCE

CVE-2026-87690 Path traversal CWE-22 in Metasploit Framework's post/appleios/gather/iosimagegather post-exploitation module: a hostile or tampered "iOS device" any Meterpreter session whose agent controls its own protocol responses achieves an arbitrary file write on the pentester's workstation,...

CVE-2026-128909

The DJI AeroScope Mobile (TP703) is vulnerable to a CWE-347 flaw in the firmware update handler of the uavmonitor_usbv1 management service on the 1300 communications board . The root cause is that the device accepts any image matching a supplied MD5 checksum without verifying a cryptographic sign...

EUVD-2026-125352

Improper verification of cryptographic signature CWE-347 in the firmware update handler of the management service uavmonitorusbv1 of the 1300 communications board in DJI AeroScope Mobile TP703 firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows an...

PT-2026-146891

Improper verification of cryptographic signature CWE-347 in the firmware update handler of the management service uavmonitor usbv1 of the 1300 communications board in DJI AeroScope Mobile TP703 firmware 03.00.00.26, with 1300 communications board firmware 02.00.07.12 through 02.00.08.40, allows a...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass 🔥 Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...

PT-2026-134911

Name of the Vulnerable Software and Affected Versions prefab-ui versions 0.14.0 through 0.20.2 Description The Generative UI sandbox runs caller-supplied Python code within Pyodide inside a Deno subprocess. The launcher starts Deno with unrestricted --allow-read, --allow-write, and --allow-net...

Exploit for CVE-2026-87690

CVE-2026-87690 Path traversal CWE-22 in Metasploit Framewor...

BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the downloadpolyhavenasset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious...

PYSEC-2026-4203 BlenderMCP path traversal in download_polyhaven_asset allows arbitrary file writes

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the downloadpolyhavenasset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious...

CVE-2026-87690

The Metasploit Framework post module post/appleios/gather/iosimagegather is affected by a relative path traversal vulnerability CWE-22. The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or tampered iOS device — directly into the loc...

PT-2026-110468

Name of the Vulnerable Software and Affected Versions Metasploit Framework affected versions not specified Description The post module post/apple ios/gather/ios image gather contains a relative path traversal issue. The module takes file names from a Meterpreter directory listing, which can be...

Cisco ASA Trust Boundary Violation (CVE-2022-20826)

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance ASA Software or Cisco Firepower Threat Defense FTD Software could allow an unauthenticated attacker with physical access to the device to bypass the secure bo...

CVE-2026-96454

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with...

CVE-2026-96454 Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with...

CVE-2026-96454

The Pake tool, which converts websites into desktop applications using Tauri , contains a vulnerability where generated applications grant unrestricted IPC access to any HTTPS origin. The issue stems from two inherited settings: a wildcard in src-tauri/capabilities/default.json (allowing IPC from...

CVE-2026-96454 Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with...

PT-2026-97264

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with...

CVE-2026-96454: Missing Authorization

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with...

CVE-2026-50158

yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download in pkg/caption/caption.go, where os.Create creates or truncates that...

CVE-2026-50158: External Control of File Name or Path

yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download in pkg/caption/caption.go, where os.Create creates or truncates that...