CVE-2026-25559

OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authenticated attackers to perform arbitrary file read, write, and delete operations by supplying unsanitized absolute paths to the upload handler and wordlist functions. Attackers can...

CVE-2025-50691

The MCSManager 10.5.3 daemon process runs as a root account by default, creating a security risk where sensitive data, including tokens and terminal content , is stored in a data directory with permissions allowing it to be readable by all users . An unauthorized user on the system can read the d...