CVE-2018-6574

CVE-2018-6574...

CVE-2025-24813-POC

JSP Web Shell 上传器 一个简单的 Python 工具，用于通过 HTTP PUT 请求将一个基础的 JSP Web Shell 上传到一个或多个目标。 ⚠️ 仅用于教育和授权的渗透测试。 Apache Tomcat 存在路径等价/路径遍历漏洞，原因是未正确处理路径中的 ../ 序列。 CVE ID: CVE-2025-24813 Severity: 严重 Reference link: https://github.com/advisories/GHSA-83qj-6fr2-vhqg 🧰 功能 上传一个具有命令执行能力的基础 JSP Shell 支持： 单个目标 -t...

CVE-2026-94046: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...

Linux Distros Unpatched Vulnerability : CVE-2026-93987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the rclone serve docker volume plugin. newVolume in cmd/serve/docker/volume.go...

CVE-2026-94049: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function renderslides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath causes path traversal. The attack is possible to be carried out remotely. The exploit has been published and may be...

CVE-2026-94044: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...

Linux Distros Unpatched Vulnerability : CVE-2026-93986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object...

CVE-2026-94037: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main.py of the component analyzecsvdata MCP tool. This manipulation of the argument filename causes path traversal. Remote...

CVE-2021-41773

CVE-2021-41773 PoC — Path Traversal en Apache HTTP Server Descripción general CVE-2021-41773 es una vulnerabilidad de path traversal que afecta a Apache HTTP Server 2.4.49. La vulnerabilidad permite a un atacante acceder a archivos fuera del directorio previsto bajo configuraciones específicas,...

vcenter-cve-2021-21980-lab

CVE-2021-21980 Vulnerable Test Environment Overview Realistic test environment simulating VMware vSphere Web Client path traversal vulnerability. ⚠️ WARNING: Vulnerable test environment. Do NOT expose to internet! Quick Start Build and Run root@kitploit: podman build -t vcenter-lab . podman run -d...

CVE-2024-38819-POC

CVE-2024-38819: Proof of Concept PoC This is a proof of concept for the CVE-2024-38819 vulnerability, which I reported, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 root@kitploit: cd vuln docker build -t...

CVE-2026-93992

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93988

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2020-5752

CVE-2020-5752: Druva inSync Escalada de Privilegios Local Un exploit en C para el Cliente Windows de Druva inSync v6.6.3 y anteriores. La aplicación expone un servicio RPC en el puerto 6064 que es vulnerable a inyección de comandos mediante path traversal. Esto permite a un usuario local ejecutar...

CVE-2026-93992 Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93992 Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93992

Gopeed (a download manager) versions through 2.0.0-beta.3 contain a path traversal vulnerability in its archive extraction feature. Attackers can craft malicious archives whose entries include directory traversal sequences that bypass path validation. When a user downloads and extracts such an ar...

CVE-2026-93992 Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...