Cyber CrimeFortinet Zero-Day Hits FortiMail Gateways
Fortinet reports active exploitation of a critical FortiMail flaw, with patches still pending and CISA ordering federal fixes by October 4th.
> Search
8 results for “path traversal”
Cyber Crime
SecurityGitLab's Perfect 10 Flaw Exposes Secrets
A maximum-severity path traversal bug in GitLab's repository commits API lets unauthenticated attackers read arbitrary files, and probes are already underway.
SecurityGitLab's Patch Race Against Active Exploits
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
SecurityCritical Path Traversal Found in h2oGPT
A path traversal flaw in h2oGPT versions 0.2.1 and earlier allows unauthenticated attackers to read, write, or delete files, potentially leading to RCE.
SecurityCritical Path Injection Found in Microsoft Kiota
Microsoft has patched a critical path traversal vulnerability in Kiota that allows malicious OpenAPI descriptions to inject unauthorized file references.
SecurityCritical Bold Reports Flaw Risks Server Data
A path traversal vulnerability in Bold Reports Standalone Report Designer allows unauthenticated attackers to read sensitive files from the server.
SecurityPath Traversal Flaw Hits IBM Langflow
A critical vulnerability in IBM Langflow OSS allows for arbitrary file writes due to improper input validation.
SecurityShareFile Patch Addresses Path Traversal
Progress confirms a high-severity flaw in Storage Zone Controllers necessitated a temporary service shutdown for customers.