Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

CVE_2021-41773

Vulnerability scanner for Apache Path Traversal CVEs 2021-41773...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - Unauthenticated SQL Injection via URL Path Description The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficien...

CVE-2026-107318 @fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream...

CVE-2026-107318

The @fastify/reply-from Fastify plugin (versions prior to 12.7.0 ) is vulnerable to improper certificate validation in its built-in HTTPS transports. The root cause is that these transports override the secure default by setting rejectUnauthorized to false, causing the proxy to fail to verify the...

openlore-PoC

Path Traversal in OpenLore Spec-Generation Writer via Unsanitized LLM-Derived domain Field CVE status: requested, pending assignment. This finding is published as GHSA-5j8x-q7q6-58j5. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-openlore-PoC and this banner is replaced with the CVE...

cve-2026-47627

CVE-2026-47627 — NVIDIA Triton Inference Server Path Traversal → DoS Zip-Slip Writeup lengkap hasil riset & PoC di repo ini image nvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0. Repo di-setup untuk selalu explicit agar PoC tanpa restart via gRPC. Daftar Isi 1. Ringkasan CVE 2. Lingkungan...

CVE-2024-53677

This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit nofile=122880:122880 -m 3G...

CVE-2025-4138-poc

CVE-2025-4138 Auto-Sudo Generator A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517 Path Traversal via PATHMAX Truncation. Successfully exploiting this vulnerability allows an attacker to bypass tarfile extraction filters and write arbitrary files to...

CVE-2025-66249-POC

CVE-2025-66249 — Apache Livy Path Traversal Whitelist Bypass For educational and security research purposes only. Do not use against systems you do not own or have explicit written permission to test. →Full Disclaimer Overview Field| Detail ---|--- CVE ID| CVE-2025-66249 Severity| Important CVSS...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 Vulnerability Tester Automated security testing tool for CVE-2023-33177 - Zip Slip Path Traversal vulnerability in Xibo CMS that leads to Remote Code Execution RCE. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Only use on systems you own...

CVE-2025-47273-PoC

CVE-2025-47273: setuptools version 78.1.0 - Path Traversal in setuptools.packageindex Disclaimer This Proof of Concept PoC is intended for educational purposes and authorized security auditing only. The author assumes no responsibility for misuse of this information. Unauthorized access to comput...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary Field| Detail ---|--- CVE ID| CVE-2021-41773 Affected Software| Apache HTTP Server...

CVE-2018-14847

🐞 MikroTik CVE-2018-14847 Unauthenticated path traversal in MikroTik's Winbox protocol leaking admin credentials from /flash/rw/store/user.dat 📑 Table of Contents Overview Affected Versions Vulnerability 📂 Winbox Protocol Path Traversal Password Decryption Developer Backdoor Exploit References 📋...

CVE-2026-84275

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

Exploit for Path Traversal in Rubyonrails Rails

Ruby on Rails Accept Header File Disclosure CVE-2019-5418...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-82896 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability...

CVE-2026-53713

A flaw was found in Envoy Gateway. An authenticated attacker with permissions to submit Lua extension policies can bypass file path restrictions by submitting paths containing redundant slashes. This flaw allows the attacker to read arbitrary files from the gateway controller container, resulting...

Exploit for Path Traversal in Unbit Uwsgi

uWSGI PHP Plugin Path Traversal CVE-2018-7490 Vulhubhttp...

CVE-2026-53519

Lab CVE-2026-53519 - Nezha Dashboard pre-auth path traversal Lab tai hien lo hong pre-auth path traversal via/dashboard.. prefix confusion trong Nezha Dashboard, dan toi leak jwtsecretkey - forge JWT - chiem quyen admin. Moi truong Docker, tach A/B theo version de so sanh vuln vs patched. | Image...