SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

CVE-2026-54202 TeamDavid: Path Traversal in the archive creation functionality

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and insufficiently validated, an attacker can manipulate the input to traverse directories. This allows the creation of folde...

EUVD-2026-54434

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability in the archive creation functionality. Because the archive path is user-controlled and insufficiently validated, an attacker can manipulate the input to traverse directories. This allows the creation of folde...

MAL-2026-11531 Malicious code in @zzzgenesis00/hdkey-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9f452c698c4accd69ca2df75854aae3189ecf3dddafc4b62d86403ca3d911f On npm install, scripts.postinstall executes postinstall.js which harvests installer-side secrets and host reconnaissance and transmits them to...

WordPress Plugin dzs zoomsounds Detection

Searches for sensitive directories present in the dzs-zoomsounds plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the dzs-zoomsounds plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Plugin Email Subscribers Listing Detection

Searches for sensitive directories present in the email-subscribers plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the email-subscribers plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Plugin Idx Broker Platinum Listing Detection

Searches for sensitive directories present in the idx-broker-platinum plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the idx-broker-platinum plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Wordpress Plugin MStore API Detection

Searches for sensitive directories present in the mstore-api plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the mstore-api plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WordPress Plugin Ultimate Member Detection

Searches for sensitive directories present in the ultimate-member plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the ultimate-member plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Popup Plugin Directory Listing Detection

Searches for sensitive directories present in the wordpress-popup plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the wordpress-popup plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

WordPress Plugin Media Gallery Pro Listing Detection

Searches for sensitive directories present in the easy-media-gallery-pro plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the easy-media-gallery-pro plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2026-59995

A flaw was found in OpenSSH. The sftp client, when used to download files from a malicious server with the 'sftp server:/path .' command, does not properly restrict where those files are saved. This allows an attacker to control the download location, potentially overwriting existing files or...

Operation-West-Wild-2.0

Operation West Wild 2.0 – Penetration Testing Report 📌 Ove...

CVE-2025-69428

An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories...

CVE-2025-69428

An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories...

Pro-Bit security vulnerabilities

Pro-Bit is an enterprise management system developed by Pro-Bit company in Slovenia. Versions of Pro-Bit prior to 1.77.4 contained a security vulnerability, which allowed unverified attackers to directly access sensitive directories and their subdirectories...

PT-2026-34508

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A logic error in the ln utility allows it to dereference a symbolic link target even when the --no-dereference or -n flag is used. The utility only honored the no-dereference intent ...

CVE-2026-33194

SiYuan CVE-2026-33194 affects versions prior to 3.6.2. The vulnerability stems from an incomplete denylist in the IsSensitivePath() function (kernel/util/path.go) which was expanded but still does not block several Linux directories such as /opt, /usr, /home, /mnt, and /media. The affected endpoi...

PT-2026-26210

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.6.2 Description SiYuan, a personal knowledge management system, has an issue in the IsSensitivePath function within kernel/util/path.go. This function employs a denylist approach to restrict file access, but the...

PT-2026-23693

Musicco 2.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary directories by manipulating the parent parameter. Attackers can supply directory traversal sequences in the parent parameter of the getAlbum endpoint to access sensitive system...