119144 matches found
EUVD-2026-82788
A direct request 'forced browsing' vulnerability in Wallpaper Path in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to obtain sensitive information...
CVE-2026-40532
Synology DiskStation Manager (DSM) is affected by a forced browsing vulnerability in the Wallpaper Path component, allowing remote authenticated users to obtain sensitive information. The vulnerability affects DSM versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . The CVSS 3.1 s...
CVE-2026-86251
A flaw was found in h3. A remote attacker could exploit a path traversal vulnerability in the serveStatic utility. This vulnerability arises from a double-decoding flaw, where specially crafted, double-encoded dot sequences in a request path are incorrectly processed. This allows an attacker to...
CVE-2026-6205
CVE-2026-6205 is an external control of file name or path vulnerability in the Upload API of Synology DiskStation Manager (DSM) prior to versions 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075. It allows remote authenticated users to write arbitrary files and conduct denial-of-servic...
CVE-2026-6205
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...
session_reaper_lab
CVE-2025-54236 - SessionReaper Lab Docker environment for practical demonstration of CVE-2025-54236 SessionReaper: PHP Object Deserialization leading to RCE in Magento Open Source 2.4.7. Exclusive use in controlled environment. Do not run against systems without explicit authorization. About the...
Apache-OFBiz-Directory-Traversal-exploit
Apache-OFBiz-Directory-Traversal-exploit Apache OFBiz 18.12.12...
CVE-2026-90982
A flaw was found in @fastify/static, a Fastify plugin for serving static files. On case-insensitive filesystems, such as Windows or default macOS volumes, a route guard or allowedPath restriction can be bypassed. This occurs because the route matcher is case-sensitive while the filesystem is not,...
WSO2-2021-1260
WSO2-2021-1260: WSO2 ESB のアーティファクト名におけるパストラバーサルによる任意ファイル削除 Artifact Upload 機能におけるサニタイズされていないユーザー入力により、"artifactName" パラメータのパストラバーサルを利用して任意のファイル削除攻撃が実行される可能性があります。 ベンダー開示: この脆弱性に関するベンダーの開示と修正は、こちら にあります。 なぜ CVE がないのか? 私もベンダーも、この脆弱性に対する CVE を要求しませんでした。 必要条件: この脆弱性には以下が必要です: 有効なユーザー資格情報 概念実証:...
CVE-2026-20660
CVE-2026-20660 PoC バンドル このフォルダには、以下に対するスタンドアロンの概念実証（PoC）がパッケージされています： CVE-2026-20660 CFNetwork NSGZipDecoder の gzip FNAME を介したパストラバーサル 自動開封が有効な脆弱な macOS Safari への影響 1. ディレクトリ構成 server.py: トラバーサル深度とターゲット名を設定可能なメイン PoC サーバー serveroverwrite.py: ../../pwn.sh を書き込む特化バリアント README.md: 再現メモと操作ログ 2. 前提条件...
VulnScan
VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...
health-check
health-check Health Check & Troubleshooting daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/usr/sbin/nologin man:x:6:12:man:/var/cache/man:/usr/sbin/nologin...
CVE-2025-20362-Cisco-Scanner
CVE-2025-20362 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Authentication Bypass CVE-2025-20362. CVE-2025-20362 allows unauthenticated attackers to bypass authentication and access restricted WebVPN resources through path traversal / normalization flaws. Overview Thi...
CVE-2021-43798
CVE-2021-43798:Grafana 任意ファイル読み取り脆弱性 Windows+Linux 全バージョン対応の nuclei テンプレートを追加しました 52個のプラグインリスト： root@kitploit: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeger geomap canvas grafana welcome xychart heatmap postgres testdata opentsdb influxdb barchar...
CVE-2023-28252-
CVE-2023-28252- CVE-2023-28252 エクスプロイトの検出 エクスプロイトが悪用に使用するファイルを残すディレクトリ内のファイル作成を監視します。これらはハードコードされたパスで、フォルダ "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" および "C:\Users\Public\p" にあります。...
cve-2024-56348
JetBrains TeamCity Authentication Bypass + RCE CVE-2024-56348 PoC 📜 Description CVE-2024-56348 is a critical authentication bypass vulnerability in JetBrains TeamCity on-premises affecting all versions prior to 2024.12. The REST API improperly handles requests to paths containing ;.jsp, allowing ...
santa
Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
pathprober
pathprober 무차별 대입 방식을 사용하여 HTTP 경로명을 탐색 및 발견하고, 특정 단어 또는 한 번에 두 단어로 필터링합니다. 목적 웹사이트 디렉터리나 HTTP 경로명을 무차별 대입하고 HTTP 응답 코드로 검증하는 것은 더 이상 적절하지 않습니다. 이 도구는 침투 테스트를 수행하는 데 도움을 줍니다. 특정 단어 또는 한 번에 두 단어를 사용하여 디렉터리를 검증할 수 있으며, 결과가 더 정확해집니다. 다음을 찾는 데 도움을 줍니다: 웹 관리자/로그인 패널 일부 경로의 자격 증명 타사 토큰 기타 설치...