Solara <1.35.1 - Local File Inclusion

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

CVE-2025-10897

CVE-2025-10897 WooCommerce 是一个面向 WordPress 的开源电子商务插件，可将网站转变为在线商店。WooCommerce Designer Pro 是由 JMA Plugins 开发的 WordPress 插件，使客户能够直接在 WooCommerce 商店中设计和定制产品。 重要提示 ：WooCommerce 与 WooCommerce Designer Pro 是完全不同的产品。 WooCommerce Designer Pro 支持创建名片、明信片、传单、海报、T恤、贴纸及其他可打印材料，具备 CMYK 色彩支持、PDF...

CVE-2023-48795

🛡️ Escáner de Vulnerabilidad Terrapin CVE-2023-48795 Una herramienta Python para identificar servidores SSH potencialmente vulnerables a CVE-2023-48795 Terrapin mediante la extracción de banners de versión de OpenSSH a través del puerto 22 usando netcat. 📌 Descripción Este escáner comprueba si un...

CVE-2026-22557

🛡️ CVE-2026-22557 - Ubiquiti UniFi Network Application 中的严重路径遍历漏洞 📋 概述 Ubiquiti UniFi Network Application （UniFi Controller）中存在一个严重的未认证路径遍历漏洞 （CWE-22）。 具有网络访问权限 的攻击者可利用此漏洞： 遍历目录边界（../） 读取并操作底层操作系统上的任意文件 可能未经授权访问系统账户，并实现完全入侵 无需任何身份验证或用户交互。 CVSS v3.1 基础评分：10.0（严重） 攻击向量：...

CVE-2026-0847

CVE-2026-0847 — Clases Múltiples de CorpusReader en NLTK: Lectura Arbitraria de Archivos mediante Path Traversal -orange?style=for-the-badge Descripción General...

CVE-2021-22-555

此存储库没有 README。...

CVE-2025-5880-PoC

CVE-2025-5880 — Whistle 2.9.98 路径遍历漏洞利用PoC Whistle v2.9.98 中未经身份验证的路径遍历漏洞的 PoC 利用脚本。 漏洞概要 字段| 详情 ---|--- CVE ID| CVE-2025-5880 CWE| CWE-22（路径遍历） 受影响软件| Whistle ≤ 2.9.98 受影响端点| /cgi-bin/sessions/get-temp-file 攻击向量| 网络 —— 无需身份验证 影响| 可读取主机文件系统上的任意文件 filename...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS Path Traversal Autenticado / Lectura Arbitraria de Archivos CVE-2024-46987 es una vulnerabilidad de path traversal autenticado CWE-22 en Camaleon CMS un sistema de gestión de contenidos basado en Ruby on Rails. Permite a un usuario autenticado incluso con privilegios...

CVE-2025-66249-POC

CVE-2025-66249 — Apache Livy 路径遍历白名单绕过 仅供教育和安全研究使用。请勿对您不拥有或未获明确书面许可的系统进行测试。→完整免责声明 概述 字段| 详情 ---|--- CVE ID| CVE-2025-66249 严重性| 重要（CVSS 不适用 — 截至 2026-03-15，NVD 评估待定） 影响版本| Apache Livy 0.3.0-incubating 至 0.8.0-incubating — 仅当livy.file.local-dir-whitelist 设置为非默认值时 修复版本| Apache Livy 0.9.0-incubatin...

EUVD-2026-81115

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-76409

Cisco Nexus Dashboard is affected by an improper limitation of a pathname vulnerability (CWE-22), discovered during an internal security review and addressed in a software hardening release published in September 2026. The vulnerability is rated CVSS 3.1: 8.8 (HIGH) , with a vector of AV:N/AC:L/P...

CLSA-2026-1789379074 TuxCare security update for io.netty (22 CVEs)

TuxCare rebuilt 46 io.netty packages to address 22 CVEs. Fixed in 4.1.79.Final-tuxcare.4...

AlmaLinux 8 : nodejs:22 (ALSA-2026:54530)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54530 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

CVE-2026-77110 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the...

ROOT-OS-UBUNTU-2204-CVE-2023-53382 CVE-2023-53382 in linux - Patched by Root

Root has patched CVE-2023-53382 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-63815 CVE-2026-63815 in linux - Patched by Root

Root has patched CVE-2026-63815 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2018-17977 CVE-2018-17977 in linux - Patched by Root

Root has patched CVE-2018-17977 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-43424 CVE-2026-43424 in linux - Patched by Root

Root has patched CVE-2026-43424 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-21863 CVE-2025-21863 in linux - Patched by Root

Root has patched CVE-2025-21863 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...