Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 13:23:49 +0000 CVE-2026-113352 — uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers https://db.gcve.eu/vuln/cve-2026-113352 <p><strong>Affected:</strong> uTox</p> <p>uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume records that ft_find_resumeable() loads, abusing FILE pointers to write /proc/self/mem and execute code.</p> <p><strong>Affected:</strong> uTox</p> <p>uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume records that ft_find_resumeable() loads, abusing FILE pointers to write /proc/self/mem and execute code.</p> https://db.gcve.eu/vuln/cve-2026-113352