141241 matches found
CVE-2025-59342
CVE-2025-59342 - Path Traversal esm-dev Author: Byte Reaper Description CVE-2025-59342 is a path traversal vulnerability in esm.sh, a nobuild content delivery network CDN for modern web development, in version 136 and earlier. The issue exists in the handling of the X-Zone-Id HTTP header, which i...
CVE-2024-25081_2025-47273
CVE-2024-25081 e CVE-2025-47273 Prova di concetto FontForge versione ≤ 20230101 e libreria Setuptools versione Prova di concetto per elevare i privilegi all'utente che esegue un'attività che utilizza Font Forge. La seconda CVE eleva i privilegi a root, a condizione che tu abbia permessi di...
CVE-2025-44137
CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creati...
attackmapper
AttackMapper Attack Path Visualization & Threat Intelligence Platform Features • Installation • Usage • Threat Intel • Contributing Overview AttackMapper is a CLI tool for red team operations that generates attack paths, maps techniques to the MITRE ATT&CK framework, and integrates real-time thre...
CVE-2025-4138-POC
CVE-2025-4138 - Python tarfile PATHMAX Bypass PoC Author: d3vn0mi / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Overview A proof-of-concept exploit...
EXPLOIT-CVE-2026-87902
Lab + Exploit — CVE-2026-87902 Lab deliberatamente vulnerabile + PoC in Python per la CVE-2026-87902 : path traversal non autenticato nella risoluzione del page template del WordPress Core , che porta a Local File Inclusion LFI e a RCE condizionale. Campo| Valore ---|--- Prodotto| WordPress Core...
CVE-2026-56857
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...
Arbitrary-File-Read-CVE-2024-24919
Lettura arbitraria di file CVE-2024-24919 Ecco l'avviso ricevuto sul SIEM Innanzitutto, cos'è CVE-2024-24919? Ecco la descrizione sul sito NIST. Dopo ulteriori ricerche, CVE-2024-24919 è un attacco di path traversal, che spiega la richiesta effettuata alla directory '/etc/passwd'. La directory...
CVE-2025-10307
Exploit: Arbitrary File Deletion via Backuply tarfile path traversal Browser Console PoC authenticated admin async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage, credentials: 'same-origin'...
CVE-2024-24919-Incident-Report.md
🛡️ SOC287 - Lettura Arbitraria di File su Checkpoint Security Gateway CVE-2024-24919 Data: 6 giugno 2024 Tipo di Indagine: Attacco Web Piattaforma: LetsDefend Regola Attivata: SOC287 – Rilevata Lettura Arbitraria di File CVE: CVE-2024-24919 Gravità: Alta Impatto: Accesso non autorizzato a file di...
CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC
CVE-2025-4517 — Python tarfile filter="data" Bypass PoC Path traversal vulnerability in Python's tarfile module affecting versions 3.8.0 through 3.13.1. The filter="data" sandbox — intended to prevent unsafe extractions — can be bypassed by crafting paths that exceed PATHMAX 4096 bytes, causing...
CVE-2025-68645
ZimLFI-Hunter CVE-2025-68645 ZimLFI-Hunter è uno scanner Proof-of-Concept PoC professionale progettato per identificare la vulnerabilità CVE-2025-68645 in Zimbra Collaboration Suite. Questo strumento rileva i difetti di Local File Inclusion LFI attraverso l'endpoint /h/printcalendar. 🛡️ Panoramica...
AZL-107132 CVE-2026-89091 affecting package ansible 2.17.11-1
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
DEBIAN-CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-89091
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
CVE-2026-84247
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...
CVE-2026-75875
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...
CVE-2026-107716
Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered and existing .jinja prompt files. In an application where untrusted users can influence a prompt directory,...
CVE-2026-105275
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files...
