DirtyFrag-go

dirtyfrag-go Two bugs. One shell. No disk writes. Go port of dirtyfrag CVE-2026-43284 / CVE-2026-43500. How it works tl;dr The bug class is in the Linux kernel XFRM subsystem. When a file page is spliced into a pipe and then into an ESP-encrypted socket, the kernel decrypts the ESP payload in-pla...

CVE-2026-39813

🛡️ CVE-2026-39813 - Fortinet FortiSandbox Path Traversal Vulnerability 📌 Overview CVE-2026-39813 is a critical path traversal vulnerability affecting Fortinet FortiSandbox. The vulnerability arises due to improper validation of user-supplied file paths, allowing attackers to manipulate directory...

NotCVE-2026-0009

Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...

CVE-2021-41773-apache

CVE-2021-41773 Apache HTTP Server Exploit This repository contains a Python-based proof-of-concept exploit for the Apache HTTP Server path traversal vulnerability identified as CVE-2021-41773. The script is designed for security research, defensive testing, and authorized evaluations of vulnerabl...

CVE-2020-3452-Cisco-Scanner

CVE-2020-3452 - Cisco ASA Scanner Scanning for CVE-2020-3452 - unauth Path Traversal affecting Cisco ASA firewalls running anyconnect https://vulners.com/cve/CVE-2020-3452 Supporting Documents: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ro-path-KJuQhB86...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-32282 DESCRIPTION: On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the...

CVE-2026-90959 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

CVE-2026-90959

A path traversal vulnerability exists in pulpcore within the content upload API's file_url parameter. The root cause is a validation mismatch: the system rejects URLs starting with file://, but Python's URL parser accepts the file: scheme without double slashes. This allows an authenticated user ...

CVE-2026-90959 Pulpcore: pulpcore: file:// scheme allowlist bypass in content upload file_url field enables arbitrary file read and pulp container registry signing key theft

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

EUVD-2026-85920

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

CVE-2026-90959

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

OpenPLC_v3

OpenPLC Runtime version 3 Introduction OpenPLC is an open-source programmable logic controller based on easy-to-use software. Our focus is to provide a low-cost industrial solution for automation and research. OpenPLC has been used in many research papers as a framework for industrial cybersecuri...

CVE-2025-65345

CVE-2025-65345 – Authenticated Path Traversal From Zip Function Leading to Filesystem Disclosure in laravel-file-manager v3.3.1 🧭 Overview An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to use...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Leak 📌 Repository for technical documentation and resources on the Format String vulnerability in the Telnet server of Green Hills INTEGRITY RTOS v5.0.4. 📖 General Description The vulnerability affects the IPCOMShell Telnet server from...

web-attack-log-analyzer

Web Server Log Analyzer — Web Attack Detection A Python tool...

Path Traversal

Mockoon is vulnerable to Path Traversal. The vulnerability is due to insufficient path validation using a prefix check without a path-separator boundary, which allows an unauthenticated attacker to use ../ traversal sequences to access and read files from sibling directories outside the intended...

CVE-2025-65346

CVE-2025-65346 – Authenticated Path Traversal From UnZip Function Leading to Arbitrary File Write in laravel-file-manager v3.3.1 🧭 Overview A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss (CVE-2026-41305)

Summary A Denial of Service vulnerability in the postcss CSS transformation parser CVE-2026-41305 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.5.23. Vulnerability Details CVEID:CVE-2026-41305 DESCRIPTION: PostCSS takes a CSS file and...

AtomicMemory

Reference FPGA Implementation Cyclone V This directory contains the reference RTL modules, precompiled FPGA images, and optional TCL test scripts for the atomic measurement–collapse primitive. This primitive is a CMOS-compatible hardware measurement–collapse mechanism that enforces single-read...

CVE-2026-49179-Active-Directory-WriteSPNScript-Command-Injection

CVE-2026-49179: Active Directory WriteSPNScript Command Injection Summary Field| Value ---|--- CVE ID| CVE-2026-49179 CVSS| 8.8 AV:N/AC:L/PR:L/UI:N CWE| CWE-77 Command Injection Affected Component| ntdsai.dll — WriteSPNScript function Affected Systems| Windows Server 2016, 2019, 2022, 2025...