ksmbrace

ksmbrace Vulnerability research in ksmbd , the Linux kernel's in-kernel SMB3 server fs/smb/server/. Authenticated-attacker flaws on the durable-handle and path-resolution paths of ksmbd. The name nods to the race-condition theme of this line of work see the withheld byte-range-lock UAF,...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager provides a central platform for storing build artifacts CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository manager that allows an attacker to craft a URL to return any file as a download,...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U es un servidor de archivos multiprotocolo capaz de enviar y recibir archivos desde otros equipos de la red a través de diversos medios. CVE-2024-28995 es una vulnerabilidad de traversal de directorios no autenticada en SolarWin...

CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal

CVE-2026-54917 — SeaweedFS S3 gateway cross-bucket path traversal Proof-of-concept and technical write-up for CVE-2026-54917 , a path-traversal in the SeaweedFS S3 API gateway that lets a caller reach objects in any bucket , regardless of what its credentials are authorized for. | ---|--- CVE|...

CVE-2026-52680_exploit

CVE-2026-52680 — Escritura arbitraria de archivos por Path-Traversal en el batch REST de Apache Kyuubi Escritura arbitraria de archivos sin autenticación en la API REST de Apache Kyuubi a través del endpoint multipart de envío de batch. POST /api/v1/batches multipart/form-data escribe la parte...

cve-2021-41773-lab

CVE-2021-41773 — Minimal FastAPI Lab A small, self-contained FastAPI lab demonstrating how decoding user input before validating filesystem boundaries can lead to directory traversal and local file inclusion LFI, modeled after the Apache HTTP Server issues CVE-2021-41773. Features Minimal,...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Tiny File Manager-2.4.3 exploit A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project's Tiny File Manager = 2.4.6 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve...

CVE-2026-97226 DbGate files-style Endpoint files.js fs.readFile path traversal

A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...

EUVD-2026-86252

A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...

CVE-2026-97226

A path traversal vulnerability exists in DbGate versions up to 7.2.5 and 7.3.1-premium-beta.1. The flaw is located within the files-style Endpoint component, specifically in the fs.readFile function of the packages/api/src/controllers/files.js file. By manipulating the filePath/uri argument, an a...

CVE-2026-87902-Toolkit

CVE‑2026‑87902 – WordPress Unauth LFI→RCE Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act UK...

CVE-2026-87902

CVE-2026-87902 PoC — WordPress Core Pre-Auth Path Traversal → LFI → RCE CVE-2026-87902...

CVE-2026-90959

A path traversal vulnerability was found in pulpcore. The content upload API accepts a 'fileurl' parameter that allows users with file repository privileges to specify a local file URL for Pulp to download and store. A URL scheme validation check uses a string prefix comparison that only rejects...

CVE-2026-82094

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory...

CVE-2026-81547

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal...

CVE-2026-77825

IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint GET /v1/admin/logs/file. The path confinement check uses str.startswith rather than proper boundary validation, allowing an authenticated admin to read .log, .jsonl, and .json...

cve-2021-41773-source-code-analysis

Apache HTTP Server CVE-2021-41773 Source Code Analysis A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 Apache HTTP Server Path Traversal by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation...

CVE-2026-65694-PoC

CVE-2026-65694 — Microweber CMS Unauthenticated Arbitrary File Read Proof-of-concept for CVE-2026-65694 , an unauthenticated path-traversal → arbitrary file read in Microweber CMS. An unauthenticated attacker can read any file the web-server user can access — the Laravel .env APPKEY, DB...

CVE-2026-39387

CVE-2026-39387 — BoidCMS Autenticado: Subida de Archivos a RCE mediante Inyección de Plantillas Descripción BoidCMS -l -p Argumentos Flag| Descripción| Ejemplo ---|---|--- -u, --url| URL base del sitio BoidCMS objetivo| http://target.com -l, --user| Nombre de usuario administrador| admin -p,...

research

Security Research Repository dedicated to my security vulnerability discoveries CVEs. This repository contains detailed technical documentation, proof-of-concept exploits, and analysis of discovered vulnerabilities. About This repository aggregates all CVEs I have discovered and researched,...