CVE-2026-93468 HGiga｜OAKlouds - Arbitrary File Read

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-93468

HGiga OAKlouds contains an Arbitrary File Read vulnerability caused by Relative Path Traversal , allowing unauthenticated remote attackers to read arbitrary system files. CVSS 3.1 scores it 7.5 (HIGH) with network vector, low complexity, and no privileges required. No specific affected version, p...

EUVD-2026-82642

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-85706

CVE-2026-85706 GitLab 検証ラボ このディレクトリは、CVE-2026-85706 の許可された防御的テストのための、分離されたローカルのみの GitLab ラボを構築します。この CVE は GitLab CE/EE の repository-commits API のパス制限と認証の強制に影響します。完全な Ubuntu ゲストを使用します。 安全性とスコープ 自分が所有するマシン、または明示的にテストを許可されたマシンでのみ使用してください。...

CVE-2026-88533

CVE-2026-88533：QAnything 中未认证的任意文件写入 → Root RCE CVE ID ：CVE-2026-88533（由 MITRE 分配，记录发布待定） 产品 ：QAnything，由 netease-youdao 开发——开源 RAG / 知识库问答平台 受影响版本 ：v1.4.x 至 v2.0.0（默认分支 qanything-v2，直至最终提交 65de104） 修复版本 ：无——项目自 2025-03-12 起停止维护；唯一的安全修复（PR 483）位于旧版 master 分支，从未合并到 qanything-v2 弱点 ：CWE-22 路径遍历 影响...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Grafana におけるファイルの不正読み取り（0day） grafana-clock-panel プラグインにより、Grafana に新しい 0day LFI が存在するようです。次の形式の GET リクエストを送信するだけで十分です： GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd プラグインの一覧 root@kitploit:...

FORTIWEB_CVE-2025-64446-58034

Simulación de explotación de FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Este documento es solo para fines educativos y de investigación de seguridad. No lo utilice para atacar sistemas sin autorización. 1. Resumen FortiWeb es un dispositivo Web Application Firewall WAF utilizado para proteger...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS の認証済みパストラバーサル / 任意ファイル読み取り CVE-2024-46987 は、Camaleon CMS （Ruby on Rails ベースのコンテンツ管理システム）における認証済みパストラバーサル脆弱性 （CWE-22）です。これにより、ログイン済みユーザー（低権限でも）が MediaControllerdownloadprivatefile アクションを介してサーバー上の任意のファイルを読み取ることができます。 公開日 : 2024年9月18日 CVSS v3.1 : 7.7 High ベクター:...

CVE-2025-62878

CVE-2025-62878: Local Path Provisioner パストラバーサル 概要 項目| 値 ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 深刻度| クリティカル CVSS 10.0 CWE| CWE-23 相対パストラバーサル 影響を受けるコンポーネント| rancher/local-path-provisioner 影響を受けるバージョン| v0.0.27 v0.0.32 修正バージョン| v0.0.33+ 脆弱性の説明 StorageClass の pathPattern...

BypassFuzzer

Bypass Fuzzer The original 403fuzzer.py : ==Note: This has been deprecated for my new, shiny burp extension that is 1000000% better. Thank you for using my tools!== You can find the extension here: https://github.com/intrudir/BypassFuzzer-Burp Fuzz 401/403ing endpoints for bypasses 헤더, 경로 정규화, HT...

EUVD-2026-82592

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82583

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-79954

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The root cause is that the receiver selects the Security Association (SA) used for SDLS processing solely from the SPI field in the incoming frame, without verifying that the selected SA ...

CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...

EUVD-2026-82611

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...

CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand TC receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the incoming frame, but it does not verify that the selected SA is authorized for the...

CVE-2026-53571

CVE-2026-53571 CVE-2026-53571 server.fs.deny Windows 대체 경로 우회 PoC. server.fs.deny로 지정된 파일의 내용이 Windows의 브라우저에 반환될 수 있습니다. root@kitploit: mkdir CVE-2026-53571 cd CVE-2026-53571 npm init -y npm install [email protected] 검증： root@kitploit: python3 ./poc.py...

CVE-2024-6473-PoC

CVE-2024-6473 PoC Yandex Browser 데스크톱 24.7.1.380 이전 버전은 신뢰할 수 없는 검색 경로로 인해 DLL 하이재킹 취약점이 있습니다. 취약한 브라우저 버전 !IMPORTANT 설치 중에는 인터넷을 꺼야 합니다. 그렇지 않으면 브라우저가 업데이트됩니다. 취약한 버전은 download.cdn.yandex.net에서 다운로드할 수 있습니다. 또는 아카이브에서 사용 1. YandexBrowser24.4.5.498.zip 을 다운로드하여 압축을 풉니다. 2. Setup.exe 를 실행합니다. PoC...

CVE-2021-42013

CVE-2021-42013 취약한 서비스 설치 여러 옵션: 1. Docker 컨테이너 root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t...

CVE-2021-41773

CVE-2021-41773 취약 서비스 설치 여러 옵션: 1. Docker 컨테이너 root@kitploit: docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile root@kitploit: git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd CVE-2021-41773-Vulnerable-service/2.4.49 docker build -t...