250526 matches found
CVE-2026-107174
A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...
CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction
A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...
CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction
A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...
CVE-2026-46572
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory...
CVE-2026-46569
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcopytail, in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...
CVE-2026-42617
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2026-103435
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use TOCTOU gap allowed an attacker who could write to the workspace to...
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2026-102257
A Zip Slip vulnerability exists in the SonicWall SMA1000 Appliance Management Console (AMC) interface. This flaw allows a post-authentication attacker to use a specially crafted archive to extract files outside the intended destination directory, potentially leading to remote code execution . The...
EUVD-2026-94326
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2026-103435 Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use TOCTOU gap allowed an attacker who could write to the workspace to...
EUVD-2026-94319
Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that validation. This time-of-check to time-of-use TOCTOU gap allowed an attacker who could write to the workspace to...
CVE-2026-103435
Claude Code is vulnerable to an arbitrary file write due to a time-of-check to time-of-use (TOCTOU) race condition. The software validates that a target file path is within the project working directory during permission checks but re-resolves the path at write time without re-validation. An atta...
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crow...
CVE-2026-106486
A flaw was found in the Backstage Bitbucket Scaffolder backend modules. The Bitbucket pull request Scaffolder actions do not properly validate filesystem paths. An authenticated attacker who can execute an eligible template and influence an allowed repository can manipulate files outside the...
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation FBI and Secret Service USSS on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer SSL virtual private network VPN gateways. "The campaign...
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 CVSS score: 9.3 affects multiple products, including...
