CVE-2019-11043-Vulnerability

协作者：Olaf Madejski、Andrew Masone、Nate Desany PHP-FPM 反向隧道利用与持久化演示 CVE-2019-11043 — Debian PHP-FPM 路径处理漏洞 项目概述 2019 年 10 月，Debian 安全公告团队的研究人员 Emil Lerner 和 Andrew Danau 发布公告，警告 Debian 社区 PHP-FPM 中存在一个严重漏洞。由于 PHP-FPM 的路径处理代码验证不足 ，攻击者可以操纵特制请求，在某些 NGINX + PHP-FPM 配置下实现远程任意代码执行 。 本实验演示了以下漏洞的利用：...

EUVD-2026-82851

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

CVE-2026-21822

HCL AppScan 360° is affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized file modif...

CVE-2026-21822 A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).

HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...

CVE-2026-40535

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Desktop API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote attackers to write limited files and conduct limited denial-of-service attacks...

EUVD-2026-82795

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Desktop API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote attackers to write limited files and conduct limited denial-of-service attacks...

CVE-2026-40535

CVE-2026-40535 is a path traversal vulnerability in the Desktop API component of Synology DiskStation Manager (DSM) , affecting versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . The improper limitation of a pathname to a restricted directory allows remote attackers (no privileg...

CVE-2026-40536

CVE-2026-40536 is a path traversal vulnerability in the Audio API of Synology DiskStation Manager (DSM) . Remote authenticated users can access files outside the restricted directory, obtaining non-sensitive information. The flaw is an improper limitation of a pathname to a restricted directory. ...

EUVD-2026-82790

An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Audio API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to obtain non-sensitive information...

EUVD-2026-82788

A direct request 'forced browsing' vulnerability in Wallpaper Path in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to obtain sensitive information...

CVE-2026-40532

Synology DiskStation Manager (DSM) is affected by a forced browsing vulnerability in the Wallpaper Path component, allowing remote authenticated users to obtain sensitive information. The vulnerability affects DSM versions before 7.2.1-69057-10 , 7.2.2-72806-7 , and 7.3.2-86009-2 . The CVSS 3.1 s...

CVE-2026-86251

A flaw was found in h3. A remote attacker could exploit a path traversal vulnerability in the serveStatic utility. This vulnerability arises from a double-decoding flaw, where specially crafted, double-encoded dot sequences in a request path are incorrectly processed. This allows an attacker to...

CVE-2026-6205

CVE-2026-6205 is an external control of file name or path vulnerability in the Upload API of Synology DiskStation Manager (DSM) prior to versions 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075. It allows remote authenticated users to write arbitrary files and conduct denial-of-servic...

CVE-2026-6205

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...

session_reaper_lab

CVE-2025-54236 - SessionReaper Lab CVE-2025-54236 SessionReaper の実践的デモンストレーションのための Docker 環境: Magento Open Source 2.4.7 における PHP オブジェクトデシリアライゼーションから RCE に至る脆弱性。 管理された環境でのみ使用してください。明示的な許可なくシステムに対して実行しないでください。 脆弱性について CVE-2025-54236 は、Magento Open Source および Adobe Commerce のバージョン 2.4.7...

Apache-OFBiz-Directory-Traversal-exploit

Apache-OFBiz-Directory-Traversal-exploit Apache OFBiz 18.12.12...

CVE-2026-90982

A flaw was found in @fastify/static, a Fastify plugin for serving static files. On case-insensitive filesystems, such as Windows or default macOS volumes, a route guard or allowedPath restriction can be bypassed. This occurs because the route matcher is case-sensitive while the filesystem is not,...

WSO2-2021-1260

WSO2-2021-1260: WSO2 ESB のアーティファクト名におけるパストラバーサルによる任意ファイル削除 Artifact Upload 機能におけるサニタイズされていないユーザー入力により、"artifactName" パラメータのパストラバーサルを利用して任意のファイル削除攻撃が実行される可能性があります。 ベンダー開示: この脆弱性に関するベンダーの開示と修正は、こちら にあります。 なぜ CVE がないのか? 私もベンダーも、この脆弱性に対する CVE を要求しませんでした。 必要条件: この脆弱性には以下が必要です: 有効なユーザー資格情報 概念実証:...

CVE-2026-20660

CVE-2026-20660 PoC バンドル このフォルダには、以下に対するスタンドアロンの概念実証（PoC）がパッケージされています： CVE-2026-20660 CFNetwork NSGZipDecoder の gzip FNAME を介したパストラバーサル 自動開封が有効な脆弱な macOS Safari への影響 1. ディレクトリ構成 server.py: トラバーサル深度とターゲット名を設定可能なメイン PoC サーバー serveroverwrite.py: ../../pwn.sh を書き込む特化バリアント README.md: 再現メモと操作ログ 2. 前提条件...

VulnScan

VulnScan Scanner di vulnerabilita' web. Fa il crawling di un sito, trova form e parametri, e li prova contro SQL injection, XSS riflesso, path traversal e header di sicurezza mancanti. Produce un report a terminale, un PDF e ha una dashboard Flask. Progetto di apprendimento. L'ho scritto per capi...