Tag: Path Traversal
WordPress core patch closes a path traversal that can run code
WordPress 7.1.2 closes a path traversal in get_page_template() that needs no account and can end in code execution on some…
GitLab patches a 10.0 file-read flaw as scanning begins within hours
Two GitLab flaws, one a perfect 10.0, drew automated probes within hours of the patch.
Urgent Next.js updates close AVIF and Windows RCE paths
Vercel patches two critical unauthenticated RCE bugs in the Next.js framework.
Uploaded SVG images could hijack Microsoft Bing servers with system rights
Attackers could achieve SYSTEM-level code execution on Bing servers by uploading crafted SVG files through two chained vulnerabilities.
Critical Flaws in SEPPMail Email Gateway Open Path to Remote Code Execution
Seven security holes in SEPPMail's email gateway, including a critical path traversal and eval injection, could let attackers read all…