EUVD-2026-95336

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

PT-2026-109273

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...

PT-2026-108833

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0...

PT-2026-108893

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

CVE-2025-5964-

CVE‑2025‑5964 PoC de Path Traversal pour M‑Files Auteur : Byte Reaper Telegram : @ByteReaper0 Aperçu Ce dépôt contient une Preuve de Concept PoC en C pour une vulnérabilité suspectée de Path Traversal dans M‑Files version 25.6.14925.0. La PoC fichier exploit.c tente de lire des fichiers sensibles...

CVE-2017-9798

Vérification de CVE-2017-9798 Ce petit script vérifie un environnement d'hébergement partagé pour CVE-2017-9798 et se termine avec un code de retour 1 si un fichier .htaccess vulnérable a été trouvé. Exemple d'utilisation python check.py --path /var/customers/webs/...

Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 Unlock Toolkit Автоматизированный инструмент разблокировки Mi 8e5 на основе CVE-2026-43499 Описание проекта Mi 8e5 Unlock Toolkit — это автоматизированный вспомогательный инструмент для разблокировки устройств Mi 8e5. Проект реализован на основе исследований, связанных с CVE-2026-43499, и...

CVE-2026-82900

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

EUVD-2026-42899

PraisonAI: Shell command allowlist bypass via find -exec built-in action...

EUVD-2026-44636

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend...

CVE-2026-82900

IBM Guardium Data Protection versions 12.2.2 and 12.1 are affected by a vulnerability that could allow a remote attacker to delete arbitrary files. This issue is caused by an improper limitation of a pathname to a restricted directory (CWE-22). The impact is characterized by high consequences for...

CVE-2026-82900 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...

Baskerville

Baskerville 파일 또는 인터페이스에서 읽고, 각 파일의 첫 번째 패킷의 유닉스 시간을 기반으로 한 파일 이름으로 지정된 디렉토리에 파일을 씁니다. 특정 프로토콜은 억제할 수 있으며, 이 경우 처음 N개의 패킷만 디스크에 기록됩니다. 이는 TLS 또는 VPN과 같이 가치가 낮은 데이터를 저장하지 않아 디스크 사용량을 줄입니다. 요구 사항 libtrace libflowmanager libprotoident 이들 모두는 http://research.wand.net.nz/software/ 에서 다운로드할 수 있습니다. 권장 ...

zipdefrag

Этот дамп — головоломка или продвинутый парсинг методом дробовика для дураков и бунтарей жили-были Однажды, дорогой читатель, тёмной и бурной ночью ваш покорный автор наткнулся на озадачивающую и загадочную ситуацию — систему, в которой единственным препятствием для анализа памяти методом chip-of...

MS15-011-Files

MS15-011-Files Репозиторий, который эксплойт MS15-011 клонирует для получения необходимых файлов. Избавляет от необходимости загружать все файлы из exploitdev...

astrolock

Astrolock Преднамеренно уязвимое приложение для демонстрации техник сокрытия PHP-полезных нагрузок в PNG-файлах...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...

CVE-2026-83991-writeup-and-poc

The File Said No. Cloud Files Said Supersede. CVE-2026-83991 is a Windows Cloud Files tampering vulnerability whose published affected range begins with Windows 10 version 1809, almost eight years before the September 2026 fix. I asked Windows to open a file for writing. It answered...

CVE-2026-41940---cPanel-WHM-check

IOC Check Sessions Files Обзор iocchecksessionsfiles.sh — это скрипт обнаружения, предоставленный cPanel, на который ссылается официальное уведомление безопасности cPanel: Безопасность: CVE-2026-41940 — Обновление безопасности cPanel & WHM / WP2 от 28.04.2026 Скрипт используется для сканирования...

EUVD-2026-95242

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...