[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-27 04:11 UTC
Importiert: 2026-09-27 04:21 UTC
Quelle-ID: full_disc
uid_hash: bbe3dc03379dae903ff029f3cb5ad68fde12a1055bfd5f53b883792d4de47ff2

Full Disclosure

NotCVE Advisory — NotCVE-2026-0014

[-] Summary:

Improper limitation of a pathname in the drag-and-drop file transfer

feature of Input Leap, the open-source keyboard and mouse sharing tool,

allows a connected peer to write a file outside the configured drop-target

directory. Writing into the...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss