141241 matches found
CVE-2024-46987
CVE-2024-46987 – Camaleon CMS Path Traversal Autenticado / Lectura Arbitraria de Archivos CVE-2024-46987 es una vulnerabilidad de path traversal autenticado CWE-22 en Camaleon CMS un sistema de gestión de contenidos basado en Ruby on Rails. Permite a un usuario autenticado incluso con privilegios...
CVE-2025-62878
CVE-2025-62878: Path Traversal en Local Path Provisioner Resumen Elemento| Valor ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 Gravedad| Crítica CVSS 10.0 CWE| CWE-23 Recorrido de Ruta Relativa Componente Afectado| rancher/local-path-provisioner Versiones Afectadas| v0.0.27 v0.0.32...
BypassFuzzer
Bypass Fuzzer El original 403fuzzer.py : ==Nota: Esto ha quedado obsoleto por mi nueva y brillante extensión de Burp que es 1000000% mejor. ¡Gracias por usar mis herramientas!== Puedes encontrar la extensión aquí: https://github.com/intrudir/BypassFuzzer-Burp Fuzzear endpoints 401/403 para bypass...
CLEANSTART-2026-WN13169 carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)
Security vulnerability affects the apache2 package. A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS...
CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user
Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...
CLEANSTART-2026-ZP32525 flaw was found in a change made to path normalization in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A flaw was found in a change made to path normalization in Apache HTTP Server 2...
EUVD-2026-95346
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
EUVD-2026-95325
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...
EUVD-2026-95339
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...
EUVD-2026-95316
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files...
CVE-2024-6473-PoC
CVE-2024-6473 PoC Yandex Browser para escritorio anterior a 24.7.1.380 tiene una vulnerabilidad de DLL Hijacking porque se utiliza una ruta de búsqueda no confiable. Versión vulnerable del navegador !IMPORTANT Se debe apagar Internet durante la instalación, de lo contrario el navegador se...
CVE-2021-42013
Servicio vulnerable CVE-2021-42013 Instalación Varias opciones: 1. Contenedor Docker docker run -d -p 8080:80 12345qwert123456/apache2450cve-2021-42013 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-42013.git cd CVE-2021-42013-Vulnerable-service/2.4.50 docker build -t...
CVE-2026-26832
CVE-2026-26832: OS command injection in node-tesseract-ocr Summary node-tesseract-ocr through version 2.2.1 allows OS command injection in recognize in src/index.js. The package builds a shell command string and executes it with childprocess.exec. Because the input path is only wrapped in double...
Linux Distros Unpatched Vulnerability : CVE-2026-89091
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexica...
CVE-2026-75352
The OpENer v2.3 (commit 76b95cf) software contains an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to cause a denial of service (DoS). No specific remediation, exploit code, or in-the-wild exploitat...
EUVD-2026-95970
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...
PT-2026-108833
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0...
PT-2026-108893
Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...
