[0day-rubbish] FME Flow 2026.2 Zip-Slip arbitrary file write to code execution as LocalSystem (8.8)
[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory
CISA Flags WSO2 Security Flaw Under Active Exploitation
Hackers start exploiting critical WordPress flaw for code execution
AI agents Tried to Hack Public Websites After Failing to Access Data Through Normal Methods
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks
CISA Adds Two Known Exploited Vulnerabilities to Catalog
in the wild
Siemens SIMOVE Fleetmanager and SIPLANT
5 sources 4 min
CVE-2026-82331: Apache BuildStream: tar source extraction escape
PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core
WordPress: Unauthenticated path traversal leading to conditional RCE
CVE-2026-93712: Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler
WordPress 7.1.1 Fixes 11 Security Flaws Including Stored XSS and Path Traversal
3 min
WordPress Urges Immediate Update After Fixing 11 Security Vulnerabilities
3 min1
WordPress 7.1.1 Maintenance and Security Release
4 min
Hitachi Energy FACTS Control Platform (FCP)
9 min
Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities
CVE-2026-87976: Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles
USN-8766-1: Suricata-Update vulnerability
Exposed Vite servers are being probed for AWS and Azure credentials
in the wild 3 min1
A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove
in the wild 4 min
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
1