EUVD-2026-85366

Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get'. A remote attacker with a valid session token could read any file that the target user can access. This access includes the...

CVE-2026-49009

root@kitploit: ▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀...

Plex Media Server

RISK EVALUATION Plex Media Server before 1.43.3.10861 contains multiple vulnerabilities. In the worst case, a remote attacker could steal a legitimate user's account credentials and eventually write arbitrary files or execute code. 2. RECOMMENDED PRACTICES Fixed in Plex Media Server...

CVE-2026-96275

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

CVE-2026-96276

If a malicious SDK container declares an extension point with a crafted directory path, and a developer runs flatpak build-init --writable-sdk --sdk-extension with that SDK, attacker-chosen files could be written outside the working directory, since the target path is resolved via a function that...

DEBIAN-CVE-2026-96275

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

CVE-2026-96276

The Flatpak tool is vulnerable to an arbitrary write in the host context via the flatpak build-init --writable-sdk --sdk-extension command. A malicious SDK container can declare an extension point with a crafted directory path containing .. traversal sequences. Because the target path is resolved...

CVE-2026-96276

If a malicious SDK container declares an extension point with a crafted directory path, and a developer runs flatpak build-init --writable-sdk --sdk-extension with that SDK, attacker-chosen files could be written outside the working directory, since the target path is resolved via a function that...

CVE-2026-96275

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

CVE-2026-96275 Flatpak: flatpak: arbitrary write access as root via extra-data extraction

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

EUVD-2026-85342

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

CVE-2026-96275

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

CVE-2026-96275

The Flatpak package manager is vulnerable to an arbitrary write access as root. A malicious or compromised Flatpak repository can use the extract_extra_data() function to write attacker-controlled content to arbitrary locations on the host filesystem. The root cause stems from two combined issues...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - Cisco ASA および Cisco Firepower Threat Defense におけるディレクトリトラバーサル このユーティリティは、教育および倫理的なテスト目的のみで作成されています。事前の相互同意なしにこのスクリプトを使用してターゲットを攻撃することは違法です。適用されるすべての地域、州、連邦の法律を遵守する責任はエンドユーザーにあります。開発者は一切の責任を負わず、このプログラムによって引き起こされた誤用や損害についても責任を負いません。...

Path-Traversal-CVE-2024-4956

このリポジトリには README がありません。...

wargame-tarpioka

BubbleTea CVE-2007-4559 「.tar」を使用したディレクトリトラバーサル脆弱性により../../flag path root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py 現在のビルド手順 dockerの確認 docker ps docker images docker build -t tarpioka docker run -d -it --name...

CVE-2026-20896

概念実証コード CVE-2026-20896 このスクリプトは、Gitea API のルート検証におけるロジックの欠陥を自動的に悪用し、認証ヘッダー内のディレクトリトラバーサル攻撃を通じてサーバーに有効な管理トークンを強制的に付与させます。 root@kitploit: !/usr/bin/env python3 PoC: Gitea 認証バイパス CVE-2026-20896 管理された環境および認定監査 CTF 専用 import requests import sys import argparse def exponebypasstargetip, username: print...

CVE-2021-41773

Apache HTTP Server 2.4.49 - パストラバーサル & RCE CVE-2021-41773 CVE-2021-41773 を対象とした、洗練された Python ベースの概念実証 PoC エクスプロイトです。このツールは、Apache 2.4.49 サーバーにおけるパストラバーサルおよびリモートコード実行 RCE の脆弱性をテストするプロセスを自動化します。 ⚠️ 法的免責事項 このツールは教育目的のみ...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 취약한 실습 환경 이 저장소는 CVE-2025-7775에 대한 nuclei 템플릿을 테스트하기 위한 취약한 환경을 제공합니다. 실행 root@kitploit: docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app 취약점 테스트 1. 원격 명령 실행 RCE root@kitploit: curl -X POST http://localhost:5000/api/v1/configuration \ -H "Content-Type:...

vulnerabilities in Adobe Connect and the Adobe Connect Android Mobile App

Adobe has identified 9 vulnerabilities in Adobe Connect and the Adobe Connect Android Mobile App. These vulnerabilities are present in Adobe Connect 12.12 and Adobe Connect Android Mobile App 4.5. The vulnerabilities concern various security issues in Adobe Connect, including SQL injection,...