EXPLOIT-CVE-2026-87902

लैब + एक्सप्लॉइट — CVE-2026-87902 जानबूझकर कमज़ोर लैब + CVE-2026-87902 के लिए Python में PoC: WordPress Core के page template रिज़ॉल्यूशन में अनऑथेंटिकेटेड path traversal, जो Local File Inclusion LFI और सशर्त RCE तक ले जाता है। फ़ील्ड| मान ---|--- उत्पाद| WordPress Core प्रभावित संस्करण| 4.7.0 →...

CVE-2026-56857

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...

Arbitrary-File-Read-CVE-2024-24919

Leitura Arbitrária de Arquivos CVE-2024-24919 Aqui está o alerta recebido no SIEM Primeiramente, o que é CVE-2024-24919? Aqui está a descrição no site do NIST. Após mais alguma pesquisa, CVE-2024-24919 é um ataque de travessia de caminho path traversal, o que explica a requisição feita ao diretór...

CVE-2025-10307

Exploit: Exclusão Arbitrária de Arquivos via Backuply tarfile travessia de diretórios PoC no Console do Navegador admin autenticado async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage,...

CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - चेकपॉइंट सुरक्षा गेटवे पर मनमाना फ़ाइल पढ़ना CVE-2024-24919 दिनांक: जून 06, 2024 जांच प्रकार: वेब हमला प्लेटफ़ॉर्म: LetsDefend नियम ट्रिगर: SOC287 – मनमाना फ़ाइल पढ़ना पता चला CVE: CVE-2024-24919 गंभीरता: उच्च प्रभाव: पथ ट्रैवर्सल के माध्यम से संवेदनशील सिस्टम फ़ाइलों तक अनधिकृत पहुंच ...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Bypass do filtro filter="data" do tarfile do Python PoC Vulnerabilidade de path traversal no módulo tarfile do Python afetando as versões 3.8.0 a 3.13.1. A sandbox filter="data" — destinada a impedir extrações inseguras — pode ser contornada criando caminhos que excedem PATHMAX 40...

HTB-Mailing-A-Complete-Walkthrough

HTB: Mailing — Um Guia Completo Por Mursalin Se você está se dedicando às máquinas do HackTheBox, Mailing é uma daquelas máquinas que realmente ensina algo. Ela é classificada como Fácil, roda no Windows e combina algumas vulnerabilidades do mundo real — um directory traversal, um vazamento de...

AZL-107132 CVE-2026-89091 affecting package ansible 2.17.11-1

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-89091

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-84247

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-75875

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...

CVE-2026-107716

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered and existing .jinja prompt files. In an application where untrusted users can influence a prompt directory,...

CVE-2026-105275

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files...

GHSA-556J-VV39-8RQV Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

Summary In banks.registries.DirectoryPromptRegistry, prompt file paths and the index file index.json do not refuse symbolic links. When a prompt directory contains or accepts untrusted files e.g. unpacked archives, shared repositories, or multi-tenant folders, symbolic links pointing outside the...

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Summary SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for allowsubprocess, allowedpaths, blockedpaths, allowedcommands, blockedcommands, allowedimports, and blockedimports. Its strict classmethod is explicitly described as creating "a...

CVE-2026-89091

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-107716 Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered and existing .jinja prompt files. In an application where untrusted users can influence a prompt directory,...

CVE-2026-107716

The Banks library, used for generating LLM prompts, contains a symlink traversal vulnerability in the DirectoryPromptRegistry component prior to version 2.5.1 . The root cause is that the registry fails to reject symbolic links for index.json or .jinja prompt files. If an attacker can influence t...

CVE-2026-107716 Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered and existing .jinja prompt files. In an application where untrusted users can influence a prompt directory,...

CVE-2026-75875 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...