path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – Lectura Arbitraria de Archivos mediante Cadena de Filtros PHP Código del Programa PHP // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 Este repositorio contiene una plantilla yaml para escanear si un servicio puede ser vulnerable a CVE-2025-24813, sin interrumpir el servidor ni causar ningún tipo de daño, utilizando el escáner de vulnerabilidades nuclei. CVE-2025-24813 CVE-2025-24813 es una vulnerabilidad e...

CVE-2026-44024_exploit

CVE-2026-44024 — Escritura arbitraria de archivos por Path Traversal en outfile $tag de Fluentd Escritura arbitraria de archivos sin autenticación en el plugin outfile de Fluentd mediante el marcador de posición $tag. outfile permite a los operadores parametrizar la ruta de salida con un marcador...

CVE-2025-5880-PoC

CVE-2025-5880 — PoC de Path Traversal en Whistle 2.9.98 Exploit de prueba de concepto para una vulnerabilidad de path traversal sin autenticación en Whistle v2.9.98. Resumen de la vulnerabilidad Campo| Detalle ---|--- ID CVE| CVE-2025-5880 CWE| CWE-22 Path Traversal Software afectado| Whistle ≤...

POC_CVE-2025-69194

CVE-2025-69194: Vulnerabilidad de Path Traversal en GNU Wget2 📝 Descripción PoC para CVE-2025-69194 , una vulnerabilidad crítica de Path Traversal en GNU Wget2 = 2.2.0 verificado en v1.99.1. Esta vulnerabilidad permite a atacantes lograr la escritura o sobrescritura arbitraria de archivos en el...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

Escritura Arbitraria de Archivos en LAquis SCADA 👨‍💻 Autor Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Exploit de prueba de concepto para CVE-2021-41579 - Escritura arbitraria de archivos mediante un archivo de proyecto .els malicioso en LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Descripción de...

nogotofail

nogotofail Nogotofail 是一个网络安全测试工具，旨在以灵活、可扩展且强大的方式帮助开发者和安全研究人员发现并修复设备及应用程序中弱的 TLS/SSL 连接和敏感的明文流量。它包含对常见 SSL 证书验证问题、HTTPS 和 TLS/SSL 库漏洞、SSL 和 STARTTLS 剥离问题、明文问题等的测试。 设计 Nogotofail 由一个路径上的网络 MiTM 和可选的要测试设备上的客户端组成。有关 nogotofail 的概述和设计目标，请参见 docs/design.md。 依赖项 Nogotofail 仅依赖 Python 2.7 和...

CSPTPlayground

Campo de juegos de Path Traversal del lado del cliente !Doyensec Research...

Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. id: CVE-2022-27925 info: name:...

Sante PACS Server.exe - Path Traversal Information Disclosure

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed. id: CVE-2025-2264 info: name: Sante PACS Server.exe - Path Traversal...

Belkin N150 Router 1.00.08/1.00.09 - Path Traversal

A path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter. id: CVE-2014-2962 info: name: Belkin N150 Router 1.00.08/1.00.09 - Path Traversa...

TOTVS Fluig <= 1.7.0 - Arbitrary File Read

TOTVS Fluig platform contains a path traversal caused by base64-encoded manipulation of the 'file' parameter, letting attackers access arbitrary files, exploit requires attacker to control the 'file' parameter. id: CVE-2020-29134 info: name: TOTVS Fluig = 1.7.0 - Arbitrary File Read author: ls4ss...

WordPress Core - PHP Template Path Traversal

An unauthenticated attacker can make getpagetemplate page-template resolution include a chosen readable local .php file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE. id: CVE-2026-87902 info: name: WordPress...

Adobe ColdFusion - RDS Arbitrary File Write

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary code execution in the context of the current user. The RDS FILEIO WRITE operation allows unauthenticated...

DataEase < 2.10.4 - Authentication Bypass via Whitelist Path Traversal

DataEase versions up to and including 2.10.3 contain an authentication bypass in io.dataease.auth.filter.TokenFilter. The filter passes the raw, unnormalized request URI to WhitelistUtils.match, which only checks for whitelisted prefixes such as /geo/, /customGeo/, /map/, /oauth2/, and /websocket...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Lectura no autorizada de archivos en Grafana 0day Parece que el nuevo 0day LFI en Grafana existe gracias al plugin grafana-clock-panel. Basta con enviar una petición GET de la forma: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd...

CVE-2021-41773

CVE-2021-41773 vulnerabilidad del servidor http de apache solo funciona en 2.4.49 configuración requerida httpd.conf ... LoadModule cgimodule modules/modcgi.so descomenta esta línea ... AllowOverride none Require all denied comenta esta línea o establece Require all granted ... Referencias...

FORTIWEB_CVE-2025-64446-58034

Simulación de explotación de FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Este documento es solo para fines educativos y de investigación de seguridad. No lo utilice para atacar sistemas sin autorización. 1. Resumen FortiWeb es un dispositivo Web Application Firewall WAF utilizado para proteger...