path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

CVE-2026-21015-PHP-Filter-Chain-Arbitrary-File-Read

CVE-2026-21015 – Leitura Arbitrária de Arquivos via Cadeia de Filtros PHP Código do Programa PHP // vulnerable.php - Includes file based on user input via filter ?php $file = $GET'page'; // Attempt to sanitize by allowing only .php files, but vulnerable to filter wrapper...

nuclei-CVE-2025-24813

nuclei-CVE-2025-24813 Este repositório contém um yaml-template, para escanear se um Serviço pode estar vulnerável ao CVE-2025-24813, sem interromper o servidor/causar qualquer forma de dano, usando o scanner de vulnerabilidades nuclei. CVE-2025-24813 CVE-2025-24813 é uma vulnerabilidade no servid...

CVE-2026-44024_exploit

CVE-2026-44024 — Escrita Arbitrária de Arquivos por Path-Traversal no $tag do outfile do Fluentd Escrita arbitrária de arquivos não autenticada no outfile do Fluentd por meio do espaço reservado $tag. outfile permite que operadores modelem o caminho de saída com o espaço reservado $tag por exempl...

CVE-2025-5880-PoC

CVE-2025-5880 — Prova de Conceito de Path Traversal no Whistle 2.9.98 Prova de conceito de exploração para uma vulnerabilidade de path traversal não autenticada no Whistle v2.9.98. Resumo da Vulnerabilidade Campo| Detalhe ---|--- ID CVE| CVE-2025-5880 CWE| CWE-22 Path Traversal Software Afetado|...

POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal-Schwachstelle 📝 Beschreibung Proof of Concept für CVE-2025-69194 , eine kritische Path Traversal-Schwachstelle in GNU Wget2 = 2.2.0 verifiziert auf v1.99.1. Diese Schwachstelle erlaubt es Angreifern, durch die Bereitstellung einer bösartigen Metalink-Datei...

CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA Arbitrary File Write 👨‍💻 Autor Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity Exploit de prova de conceito para CVE-2021-41579 - Escrita arbitrária de arquivos via arquivo de projeto .els malicioso no LCDS LAquis SCADA ≤ 4.3.1.1085. 🚨 Descrição da Vulnerabilidade...

nogotofail

nogotofail Nogotofail ist ein Netzwerksicherheits-Testwerkzeug, das Entwicklern und Sicherheitsforschern helfen soll, schwache TLS/SSL-Verbindungen und sensible Klartext-Datenverkehr auf Geräten und Anwendungen auf flexible, skalierbare und leistungsstarke Weise zu erkennen und zu beheben. Es...

CSPTPlayground

Playground de Path Traversal no Lado do Cliente !Doyensec Research...

Belkin N150 Router 1.00.08/1.00.09 - Path Traversal

A path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter. id: CVE-2014-2962 info: name: Belkin N150 Router 1.00.08/1.00.09 - Path Traversa...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Leitura não autorizada de arquivos no Grafana 0day Parece que o novo LFI 0day no Grafana existe graças ao plugin grafana-clock-panel. Basta enviar uma requisição GET da seguinte forma: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passw...

CVE-2021-41773

CVE-2021-41773 vulnerabilidade do servidor apache http funciona apenas na 2.4.49 configurações necessárias httpd.conf ... LoadModule cgimodule modules/modcgi.so descomente esta linha ... AllowOverride none Require all denied comente esta linha ou defina Require all granted ... Referências...

FORTIWEB_CVE-2025-64446-58034

Simulation der Ausnutzung von FortiWeb CVE-2025-64446 & CVE-2025-58034 Hinweis: Dieses Dokument dient ausschließlich zu Lern- und Sicherheitsforschungszwecken. Nicht verwenden, um Systeme ohne Genehmigung anzugreifen. 1. Übersicht FortiWeb ist ein Web Application Firewall WAF-Gerät zum Schutz von...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS Path Traversal Autenticado / Leitura Arbitrária de Arquivos A vulnerabilidade CVE-2024-46987 é uma vulnerabilidade de path traversal autenticada CWE-22 no Camaleon CMS um sistema de gerenciamento de conteúdo baseado em Ruby on Rails. Ela permite que um usuário logado...

CVE-2025-62878

CVE-2025-62878: Travessia de Caminho Path Traversal no Local Path Provisioner Visão Geral Item| Valor ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 Gravidade| Crítica CVSS 10.0 CWE| CWE-23 Relative Path Traversal Componente Afetado| rancher/local-path-provisioner Versões Afetadas|...

BypassFuzzer

Bypass Fuzzer Der ursprüngliche 403fuzzer.py : ==Hinweis: Dies wurde zugunsten meiner neuen, glänzenden Burp-Erweiterung, die 1000000% besser ist, eingestellt. Vielen Dank, dass Sie meine Tools verwenden!== Die Erweiterung finden Sie hier: https://github.com/intrudir/BypassFuzzer-Burp Fuzzen von...

CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user

Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...

CLEANSTART-2026-WN13169 carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)

Security vulnerability affects the apache2 package. A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS...

CLEANSTART-2026-ZP32525 flaw was found in a change made to path normalization in Apache HTTP Server 2

Security vulnerability affects the apache2 package. A flaw was found in a change made to path normalization in Apache HTTP Server 2...

EUVD-2026-95325

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...