The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-93167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - csky: Fix a4/a5 restoration in syscall trace path The syscall trace path reloads syscall arguments from ptregs before calling the syscall handler. On C-SKY ABIv...

Linux Distros Unpatched Vulnerability : CVE-2026-92510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is...

Linux Distros Unpatched Vulnerability : CVE-2026-93155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: keembay - Fix AEAD unregister count in error path registeraesalgs registers the AEAD algorithms before registering the skcipher algorithms. If skcipher...

EulerOS Virtualization 2.11.1 : rsync (EulerOS-SA-2026-3470)

According to the versions of the rsync packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link...

EulerOS 2.0 SP10 : python-pip (EulerOS-SA-2026-3763)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

CVE-2025-6082

CVE-2025-6082 PoC de Divulgación de Ruta Completa Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilidad : Divulgación de Ruta Completa CWE-200 Descripción Este PoC explota un fallo de Divulgación de Ruta Completa en el plugin de WordPress Birth Chart Compatibility version...

CVE-2025-5964-

CVE‑2025‑5964 Path Traversal PoC para M‑Files Autor: Byte Reaper Telegram: @ByteReaper0 Resumen Este repositorio contiene una Prueba de Concepto PoC en C para una supuesta vulnerabilidad de Path Traversal en M‑Files versión 25.6.14925.0. La PoC archivo exploit.c intenta leer archivos sensibles po...

CVE-2025-59342

CVE-2025-59342 - 路径遍历 esm-dev 作者：Byte Reaper 描述 CVE-2025-59342 是 esm.sh（一个用于现代 Web 开发的无构建内容分发网络 CDN）中存在于版本 136 及更早版本中的一个路径遍历漏洞。 该问题存在于对 X-Zone-Id HTTP 头的处理中，该头部用于构建文件系统路径。该头部的值未经过适当的规范化或限制在应用程序的存储基目录内。 因此，在 X-Zone-Id 中提供 ../ 序列可能导致文件被写入预期的存储位置之外。 要求 : root@kitploit: Linux x8664 GCC 构建 :...

CVE-2024-25081_2025-47273

CVE-2024-25081 y CVE-2025-47273 Prueba de concepto FontForge versión ≤ 20230101 y librería Setuptools versión Prueba de concepto para elevar los privilegios al usuario que ejecuta una tarea que utiliza Font Forge. El segundo CVE eleva los privilegios a root, siempre que tengas permisos de escritu...

CVE-2025-44137

CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creati...

attackmapper

AttackMapper 攻击路径可视化与威胁情报平台 功能特性 • 安装 • 使用 • 威胁情报 • 贡献 概述 AttackMapper 是一款用于红队行动的 CLI 工具，可生成攻击路径、将技术映射到 MITRE ATT&CK 框架，并集成实时威胁情报。生成带有攻击流可视化的交互式 HTML 报告。 功能特性 支持的基础设施 root@kitploit: ┌─────────────────┬─────────────────────────────────────────┐ │ Active Directory│ Kerberos, ADCS, GPO, DCSync, Gold...

CVE-2025-4138-POC

CVE-2025-4138 - Bypass de PATHMAX en tarfile de Python PoC Autor: d3vn0mi root@kitploit: / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Resumen Un...

CVE-2026-70200

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70009

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

Arbitrary-File-Read-CVE-2024-24919

Lectura Arbitraria de Archivos CVE-2024-24919 Aquí está la alerta recibida en el SIEM Primero, ¿qué es CVE-2024-24919? Aquí está la descripción en el sitio web del NIST. Después de investigar más, CVE-2024-24919 es un ataque de path traversal, lo que explica la solicitud realizada al directorio...

CVE-2025-10307

漏洞利用：通过Backuply实现任意文件删除（tarfile路径遍历） 浏览器控制台PoC（已验证管理员） root@kitploit: async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage, credentials: 'same-origin' .thenr = r.text; const doc = new...

CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Date: Jun 06, 2024 Investigation Type: Web Attack Platform: LetsDefend Rule Triggered: SOC287 – Arbitrary File Read Detected CVE: CVE-2024-24919 Severity: High Impact: Unauthorized access to sensitive system files via...

CVE-2026-70200

Azure Logic Apps is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an unauthorized attacker to elevate privileges over a network. The CNA-assigned CVSS 3.1 score is 10.0 (Critical) , reflecting a network-based attack with low c...

CVE-2026-70009

Azure Arc is affected by a path traversal vulnerability caused by improper limitation of a pathname to a restricted directory. An unauthenticated attacker can exploit this over the network to elevate privileges , achieving high integrity impact with low confidentiality impact and no availability ...