WordPress Core <=6.2 - Directory Traversal

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wplang’ parameter. id: CVE-2023-2745 info: name: WordPress Core =6.2 - Directory Traversal author: nqdung2002 severity: medium description: | WordPress Core is vulnerable to Directory Traversal in...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

Ivanti Avalanche 6.3.2 - Local File Inclusion

Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. id: CVE-2021-30497 info: name: Ivanti Avalanche 6.3.2 - Local File Inclusion author: gy741 severity: high description: Ivanti Avalanch...

Buffalo WSR-2533DHPL2 - Path Traversal

Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 are susceptible to a path traversal vulnerability that could allow unauthenticated remote attackers to bypass authentication in their web interfaces. id: CVE-2021-20090 info: name: Buffalo WSR-2533DHPL2 - Path...

Atlassian Confluence Download Attachments - Remote Code Execution

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. id: CVE-2020-3187...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

CVE-2021-3019

使用方法および免責事項 lanproxy ディレクトリトラバーサル脆弱性一括検出 CVE-2021-3019 使用方法：Python CVE-2021-3019.py urls.txt urls.txt 内の各URLが1行ずつであり、脆弱性のアドレスはvul.txtに出力されます。 影響バージョン： lanproxy 0.1 本ツールはセキュリティ担当者の安全テストのためにのみ使用され、無許可での検出によって生じる直接的または間接的な結果や損害は、すべて使用者本人が負うものとします。...

CVE-2026-100520

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files in...

CVE-2026-100520 Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files in...

CVE-2026-100520

Laranode versions before 1.2.1 are vulnerable to a path traversal vulnerability within the POST /filemanager/upload-file endpoint. This flaw allows authenticated users to bypass directory restrictions by supplying traversal sequences in the path parameter. Consequently, an attacker can write arbi...

CVE-2026-100520 Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files in...

EUVD-2026-87375

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files in...

CVE-2026-100520 Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint

Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to write PHP files in...

CLEANSTART-2026-GN20091 Previously, resolving relative paths containing parent directory ('

Security vulnerability affects the loki package. Previously, resolving relative paths containing parent directory '...

CVE-2024-50508

CVE-2024-50508 Woocommerce Product Design = 1.0.0 - 認証なしの任意ファイルダウンロード 説明 WordPress用のWoocommerce Product Designプラグインは、1.0.0を含むそれ以前のすべてのバージョンにおいて、ディレクトリトラバーサルに対して脆弱です。これにより、認証されていない攻撃者がサーバー上の任意のファイルの内容を読み取ることが可能になり、そのファイルには機密情報が含まれている可能性があります。 詳細 タイプ : プラグイン スラッグ : woo-product-design 影響を受けるバージョン :...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 事前認証任意ファイル読み取り脆弱性のPOC 脆弱なエンドポイント： WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.xml PO...

CVE-2026-5027

この投稿は EQSTLab が公開した研究記事です。 この脆弱性を報告・分析したYahia Hamza に感謝します。 CVE-2026-5027 ★ CVE-2026-5027 Langflow パストラバーサル / 任意ファイル書き込み PoC ★ 説明 CVE-2026-5027 : Langflow 任意ファイル書き込みの脆弱性 説明: Langflow Reverse shell via cron job python3 CVE-2026-5027.py -t --lhost --lport 4444 分析 脆弱性のあるエンドポイント POST /api/v2/files...

CVE-2026-97161: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-100638: External Control of File Name or Path

SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allows authenticated administrators to create arbitrary directory trees and write files outside the workspace boundary. Attackers can supply directory traversal sequences in the notebook...