AlmaLinux 9.6 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (ALMALINUX9.6:CLSA-2026:1787230282)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787230282 advisory. - When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added...

Rocky Linux 9.6 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (ALMALINUX9.6:CLSA-2026:1787230282)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787230282 advisory. - When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been add...

DidiWiki - Path Traversal Detection (CVE-2013-7448)

Detects CVE-2013-7448 by requesting /api/page/get?page=../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """DidiWiki api/page/get path traversal CVE-2013-7448.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

CVE-2026-0394: Improper Limitation of a Pathname to a Restricted Directory

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...