SEKurity GmbH Logo
Home/Tags/Path Traversal

#Path Traversal

3 Articles tagged

[*] Filtering articles by tag: Path Traversal
[+] Matching entries: 3
root@sekurity:~# ls -la /tags/path-traversal/* _

[?] Related tags:

#InSEKurity#CVE#Atlassian#Jira#Confluence
CVE Research
sekurity-team

InSEKurity of the Week (CW41/2026): Atlassian Data Center Pre-Auth Arbitrary File Read (CVE-2026-21589)

One unauthenticated request to Jira, Confluence or Bitbucket reads files out of the webapp root -- including WEB-INF, where crowd.properties can hand over plaintext credentials and, from there, admin on the instance. CVSS 9.3, eight products, all versions, exploitation attempts within hours of the public write-up.

#InSEKurity#CVE#Atlassian+5
Exploit
01
CVE Research
sekurity-team

InSEKurity of the Week (CW33/2026): VMware vCenter Syslog Directory Traversal (CVE-2026-59310)

A path traversal flaw in the vCenter syslog server lets an unauthenticated attacker execute code on the appliance that governs the entire virtual estate -- and researchers counted 361 compromised hosts across 47 countries five days after disclosure.

#InSEKurity#CVE#VMware+5
Exploit
02
CVE Research
sekurity-team

InSEKurity of the Week (CW03/2026): Node.js node-tar Path Traversal (CVE-2026-23745)

Critical path traversal vulnerability in node-tar allows arbitrary file overwrite through manipulated hardlinks and symlinks in TAR archives

#InSEKurity#CVE#Node.js+3
Exploit
03

root@sekurity:~# echo "End of results for tag: Path Traversal"
End of results for tag: Path Traversal
root@sekurity:~# _