Vulnerabilities
8.7-High Unauthenticated Path Traversal Hits OrbiTeam BSCW Server
Attackers can read local files on unpatched OrbiTeam BSCW Server instances by manipulating theme parameters without any login credentials.
path traversal
Everything Firewall Scoop has reported about path traversal: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVE-2026-42269: Countly Server Path Traversal Risks Data Loss Before 24.05.50
Authenticated users with migration rights in older Countly server versions can trigger recursive file deletion outside intended directories, risking data loss.
Vulnerabilities
Unauthenticated Path Traversal in Risesoft-y9 v9.6.5-9.6.11 Allows Arbitrary File Write
Attackers can exploit a high-severity flaw in Risesoft-y9 Digital-Infrastructure to write arbitrary files, potentially leading to remote code execution without authentication.
Vulnerabilities
CVSS 9.3: Unauthenticated gvproxy Path Traversal Deletes Host Files in Red Hat
A critical path traversal bug in gvproxy lets attackers delete arbitrary host files via an unauthenticated endpoint, affecting Red Hat products.