EUVD-2026-95903

OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...

CVE-2026-75351

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

EUVD-2026-95970

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

CVE-2026-75352

The OpENer v2.3 (commit 76b95cf) software contains an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to cause a denial of service (DoS). No specific remediation, exploit code, or in-the-wild exploitat...

PT-2026-108893

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

PT-2026-108835

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...

PT-2026-108833

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0...

CVE-2025-6082

CVE-2025-6082 Full Path Disclosure PoC Author : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerability : Full Path Disclosure CWE-200 Description This Proof‑of‑Concept exploits a Full Path Disclosure bug in the Birth Chart Compatibility WordPress plugin versions ≤ 2.0. The POC send...

CVE-2025-5964-

CVE‑2025‑5964 Path Traversal PoC for M‑Files Author: Byte Reaper Telegram: @ByteReaper0 Overview This repository contains a Proof‑of‑Concept PoC in C for a suspected Path Traversal vulnerability in M‑Files version 25.6.14925.0. The PoC file exploit.c attempts to read sensitive files e.g...

CVE-2025-59342

CVE-2025-59342 - Path Traversal esm-dev Author: Byte Reaper Description CVE-2025-59342 is a path traversal vulnerability in esm.sh, a nobuild content delivery network CDN for modern web development, in version 136 and earlier. The issue exists in the handling of the X-Zone-Id HTTP header, which i...

CVE-2024-25081_2025-47273

CVE-2024-25081 और CVE-2025-47273 प्रमाण की अवधारणा FontForge ≤ 20230101 संस्करण और Setuptools लाइब्रेरी Font Forge का उपयोग करने वाले कार्य को चलाने वाले उपयोगकर्ता के लिए विशेषाधिकार बढ़ाने की प्रमाण की अवधारणा। दूसरा CVE रूट तक विशेषाधिकार बढ़ाता है, बशर्ते आपके पास संवेदनशील निर्देशिकाओं पर...

CVE-2025-44137

CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creati...

attackmapper

AttackMapper Attack Path Visualization & Threat Intelligence Platform Features • Installation • Usage • Threat Intel • Contributing Overview AttackMapper is a CLI tool for red team operations that generates attack paths, maps techniques to the MITRE ATT&CK framework, and integrates real-time thre...

CVE-2025-4138-POC

CVE-2025-4138 - Python tarfile PATHMAX Bypass PoC Author: d3vn0mi / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Overview A proof-of-concept exploit...

zip-shotgun

ZIP Shotgun ज़िप फ़ाइल अपलोड कार्यक्षमता और ज़िप फ़ाइलों के संभावित निष्कर्षण की कमज़ोरियों उर्फ़ Zip Slip के परीक्षण के लिए उपयोगिता स्क्रिप्ट। इस स्क्रिप्ट का विचार Silent Signal Techblog - Compressed File Upload And Command Execution और OWASP - Test Upload of Malicious Files से आया है। Snyk.io...

EXPLOIT-CVE-2026-87902

مختبر + استغلال — CVE-2026-87902 مختبر ضعيف عن قصد + PoC بلغة Python من أجل CVE-2026-87902 : اجتياز المسار غير المُصادَق عليه في حل page template الخاص بـ WordPress Core ، مما يؤدي إلى Local File Inclusion LFI وRCE شرطي. الحقل| القيمة ---|--- المنتج| WordPress Core الإصدارات المتأثرة| 4.7.0 →...

CVE-2026-56857

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...

Arbitrary-File-Read-CVE-2024-24919

قراءة الملفات التعسفية CVE-2024-24919 فيما يلي التنبيه الذي تم استلامه على نظام SIEM أولاً، ما هو CVE-2024-24919؟ هذا هو الوصف الموجود على موقع NIST. بعد مزيد من البحث، CVE-2024-24919 هو هجوم اجتياز المسار Path Traversal، وهو ما يفسر الطلب المُرسل إلى دليل '/etc/passwd'. يخزن دليل /etc/passwd...

CVE-2025-10307

Exploit: Arbitrary File Deletion via Backuply tarfile path traversal Browser Console PoC authenticated admin async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage, credentials: 'same-origin'...

CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - चेकपॉइंट सुरक्षा गेटवे पर मनमाना फ़ाइल पढ़ना CVE-2024-24919 दिनांक: जून 06, 2024 जांच प्रकार: वेब हमला प्लेटफ़ॉर्म: LetsDefend नियम ट्रिगर: SOC287 – मनमाना फ़ाइल पढ़ना पता चला CVE: CVE-2024-24919 गंभीरता: उच्च प्रभाव: पथ ट्रैवर्सल के माध्यम से संवेदनशील सिस्टम फ़ाइलों तक अनधिकृत पहुंच ...