CVE-2024-0670

CVE-2024-0670 – Local Privilege Escalation in CheckMK Agent PowerShell PoC Abstract This repository presents an independent PowerShell proof of concept for CVE-2024-0670 , a Windows local privilege escalation vulnerability in the CheckMK Agent. The vulnerability allows a low-privileged local user...

CVE-2026-108544 Lippu Docx Reader Office Viewer App path traversal

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

EUVD-2026-96865

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

CVE-2026-108544

A path traversal vulnerability exists in the Lippu Docx Reader Office Viewer App on Android , affecting versions up to 1.4.5 . The flaw is located in the word.office.docxviewer.document.docx.reader.ViewTxt function, where improper handling of the _display_name argument allows for directory traver...

CVE-2026-108543 ag2ai ag2 UserProxyAgent os.path.join path traversal

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...

EUVD-2026-96864

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...

CVE-2026-108543

The ag2ai ag2 library (versions up to 0.13.4 ) is vulnerable to a path traversal vulnerability within the UserProxyAgent component. The root cause is the improper handling of the filename argument in the os.path.join function, which allows for remote execution of the attack. While an exploit has ...

EUVD-2026-96863

A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotel...

CVE-2026-108542

A server-side request forgery (SSRF) vulnerability exists in the 021is elvix-sdk up to version 0.10.1 . The flaw is located within an unknown functionality of the src/mcp/index.ts file in the MCP Request Handler component. By manipulating the argument path , an attacker can execute the attack rem...

progress-burp

Progress Tracker Extensión de Burp Suite para seguir el progreso de evaluación de vulnerabilidades. Características Captura de elementos peticiones únicas desde las herramientas de Burp Suite Proxy, Repeater, Target. La clave única de la petición se define como: destino host, puerto, protocolo,...

doctrack

Doctrack Herramienta para manipular y armamentizar documentos Office Open XML. Características Crear documentos Office Open XML Word, Excel Insertar píxeles de seguimiento y rutas UNC Inyección de plantilla remota Insertar partes CustomXML Inspeccionar URLs de destino externas, metadatos y partes...

CVE-2026-22557

🛡️ CVE-2026-22557 - Critical Path Traversal Vulnerability in Ubiquiti UniFi Network Application 📋 Overview A critical unauthenticated path traversal vulnerability CWE-22 exists in the Ubiquiti UniFi Network Application UniFi Controller. An attacker with network access can exploit this flaw to:...

pidrila

PIDRILA Versión actual: v0.1.0 2020.11.08 Resumen PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer es un prototipo de escáner de rutas web asíncrono realmente rápido desarrollado por el equipo de BrightSearch para todos los rastreadores éticos de la red...

dirstalk

Dirstalk Dirstalk es una aplicación multi-hilo diseñada para realizar fuerza bruta de rutas en servidores web. La herramienta contiene funcionalidades similares a las ofrecidas por dirbuster y dirb. Aquí puedes verla en acción: Contenido Cómo usarlo Escaneo Recursos útiles Generador de diccionari...

dotdotslash

dotdotslash Una herramienta para ayudarte a buscar vulnerabilidades de Directory Traversal Benchmarks Plataformas que probé para validar la eficiencia de la herramienta: DVWA low/medium/high bWAPP low/medium/high Capturas de pantalla Instalación Puedes descargar la última versión clonando este...

CVE-2026-108693

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with...

CVE-2026-108693

A flaw was found in ImageMagick. An insecure search path vulnerability allows a local attacker to achieve arbitrary code execution by placing a malicious executable into the application's working directory. When converting document formats such as PDF or PostScript on Windows systems without a...

EUVD-2026-96696

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with...

CVE-2026-108693

The ImageMagick software on Windows versions through 7.1.2-33 and 6.9.13-58 is vulnerable to an uncontrolled search path vulnerability within the NTGhostscriptEXE() function. When Ghostscript is unregistered, the application launches gswin64c.exe using its bare name. This allows an attacker to pl...

PT-2026-110073

Name of the Vulnerable Software and Affected Versions ag2ai ag2 versions prior to 0.13.5 Description A path traversal issue exists in the UserProxyAgent component. The problem occurs within the os.path.join function when processing the filename argument, allowing a remote attacker to manipulate...