GHSA-77XJ-X4RM-935C datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

Summary When processing an attacker-controlled Protobuf schema, vulnerable versions of datamodel-code-generator could write a generated weak-import stub outside the intended weakimports temporary directory. Absolute import paths and relative paths containing .. could escape this directory. An...

EUVD-2026-43174

PraisonAI: Project custom command templates can read outside-workspace files into model prompts...

CVE-2026-107377 datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAKIMPORTPATTERN and consumed by writemissingweakimports in...

CVE-2026-107377

The datamodel-code-generator library (versions 0.59.0 through 0.81.0 ) is vulnerable to a path traversal attack when processing attacker-controlled Protobuf schemas. The root cause lies in the _write_missing_weak_imports function in src/datamodel_code_generator/parser/protobuf.py, which fails to ...

EUVD-2026-95134

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAKIMPORTPATTERN and consumed by writemissingweakimports in...

CVE-2026-107377 datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAKIMPORTPATTERN and consumed by writemissingweakimports in...

CVE-2026-7020

CVE-2026-7020 Ollama arbitrary file read via tensor digest path traversal. Exfiltrates SSH host keys and any other file from a reachable Ollama host in three unauthenticated API calls. Writeup: Co-Researcher @gouldnicholas Usage python3 poc.py Tries all three SSH host key types with known sizes a...

CVE-2026-1357-POC

CVE-2026-1357 — WPvivid Backup & Migration RCE CVE Credit: Lucas Montes NiRoX Tool By: CyberTechAjju CVSS: 9.8 Critical | Affected: ≤ 0.9.123 | Patched: 0.9.124 ⚠️ Disclaimer For authorized security testing only. Unauthorized access to systems is illegal. Overview Unauthenticated RCE in WPvivid...

CVE-2026-1056-POC

CVE-2026-1056-POC Snow Monkey Forms - Unauthenticated Arbitrary File Deletion PoC This repository contains a Proof of Concept PoC for a critical vulnerability in the Snow Monkey Forms WordPress plugin versions send; // Direct execution flow to send // CSRF check is only performed for other method...

CVE-2026-30039

CVE-2026-30039 Security advisory materials for CVE-2026-30039, a symlink-based archive extraction issue in rarfile affecting versions 4.2 and earlier. English advisory | 中文版本 Overview rarfile extracts symbolic links from attacker-controlled RAR archives without validating whether the embedded...

CVE-2026-33229

CVE-2026-33229 — XWiki RCE via Apache Velocity Sandbox Bypass A Remote Code Execution vulnerability in XWiki Platform that allows an authenticated user with scripting permissions to bypass the Apache Velocity sandbox entirely — no Java Reflection required — by traversing pre-instantiated objects...

CVE-2021-43798_exploit

CVE-2021-43798exploit Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions is vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: /public/plugins//, where is the plugi...

CVE-2024-41713-Scan

CVE-2024-41713 Scanner This repository contains a Python script to detect the presence of the CVE-2024-41713 vulnerability in Apache HTTP Server. CVE-2024-41713 is a directory traversal vulnerability that allows unauthorized attackers to access restricted resources on vulnerable servers. About...

CVE-2023-1177-MLFlow

CVE-2023-1177 MLFlow Path Traversal About MLflow MLflow is an open-source platform for managing the end-to-end machine learning lifecycle. Primary Functions: MLflow tackles four primary functions: Tracking experiments to record and compare parameters and results MLflow Tracking. Packaging ML code...

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — Path Traversal in InvenTree Report Templates Advisory: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 Severity: Medium Published: 2026-03-20 Credit: @alonaki Description A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary files from t...

CVE-2025-60423

Authentication Bypass: 7.2.8 This authentication bypass is similar to Shiro's permission bypass. In the dofilterInternal method of the sessionfilter class, the default dofilter parameter is true, and only when it is false can authentication be bypassed. Following into the matches method, this cod...

CVE-2026-22557-PoC

CVE-2026-22557 -- UniFi Network Application Pre-Auth Path Traversal Pre-authenticated path traversal in the UniFi Network Application guest portal /guest/s/site/login. The pageerror query parameter is passed to a resource loader without validation, allowing an unauthenticated attacker to read fil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

NodeJS-Tar-Symlink-Exploit-CVE-2026-29786

📦 CVE-2026-29786: Node.js Tar Symlink Vulnerability -yellow 📌 Executive Summary This repository documents research into CVE-2026-29786 , a high-severity vulnerability discovered in the popular Node.js tar package. The flaw allows an attacker to create a malicious tar archive that, when extracted,...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...