CVE-2021-43798-Exploit-for-Windows-and-Linux

CVE-2021-43798-Exploit-for-Windows-and-Linux Modified exploit for CVE-2021-43798. Original exploit code: https://www.exploit-db.com/exploits/50581 Changes: This modified version is compatible with both Windows and Linux underlying servers. When a user enters an absolute path Eg:...

lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode

A flaw was found in lrzsz. The lrz receive utility fails to properly sanitize absolute file paths in restricted mode, only checking for relative path traversal sequences. A remote attacker transmitting files can exploit this vulnerability to write or overwrite arbitrary files outside the intended...

Important: Red Hat Security Advisory: lrzsz security, bug fix, and enhancement update

An update for lrzsz is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Gradio - Absolute Path Traversal

Gradio 6.7 on Windows with Python 3.13+ contains an absolute path traversal caused by incorrect path validation in path joining logic, letting unauthenticated attackers read arbitrary files from the server. id: CVE-2026-28414 info: name: Gradio - Absolute Path Traversal author: 0xAkoko severity:...

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

LOLLMS WebUI - Absolute Path Traversal

An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...

CVE-2025-46822

CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path Description: While Path.resolve method is being used to protect against path traversal I have found that the usage of absolute path successfully read internal files , the endpoint is also not authenticated this means anyone can...

CVE-2020-13941

CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr Multiple Solr endpoints have been found to accept absolute paths. In Windows systems these absolute path can be forced to make the OS connect to an attacker-controlled SMB server. This behaviour may result in attacks such as...

GHSA-Q7M5-3JMV-VM48 PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace

ContextGatherer include resolution permits absolute and traversal reads outside the workspace Summary PraisonAI's praisonai.ui.context.ContextGatherer treats the configured directory as the project workspace, but project-controlled .praisoncontext and .praisoninclude files can name absolute paths...

GHSA-4XXV-6WMF-XF45 PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace

FastContext path resolution permits absolute and traversal reads outside the workspace Summary PraisonAI's praisonaiagents.context.fast FastContext feature treats workspacepath as the root directory for code search, but its model-facing search tools and high-level readcontext helper accept absolu...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 — pdfminer.six RCE exploit Python 3, stdlib...

rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options

A flaw was found in rsync. A remote attacker can exploit this vulnerability by specifying an absolute path using the --temp-dir or --link-dest options. This bypasses the rename-confinement logic, allowing the attacker to write files to arbitrary locations outside the intended destination tree,...

Astra Linux – Vulnerability in ARK

The libarchiveplugin.cpp file in the KDE archive prior to version 24.12.0 can extract to an absolute path from an archive...

Astra Linux – Vulnerability in Ansible

There exists an absolute path traversal attack within the Ansible automation platform. This flaw allows an attacker to create a malicious Ansible role and have the victim execute that role. A symbolic link can be used to overwrite a file that is outside of the extraction path...

CVE-2025-70820

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

EUVD-2025-210899

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

PT-2026-90948

Name of the Vulnerable Software and Affected Versions Zettlab D6 Ultra versions prior to 1.7.0 Description An absolute path traversal issue exists, allowing access to directories outside of the designated personal folder. Recommendations Update Zettlab D6 Ultra to version 1.7.0 or later...

CVE-2025-70820

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

CVE-2025-70820: Absolute Path Traversal

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

CVE-2025-70820

Zettlab D6 Ultra (a NAS device) prior to firmware 1.7.0 is affected by an absolute path traversal vulnerability that allows an attacker with low privileges on an adjacent network to reach folders outside the user's personal folder, resulting in low confidentiality impact (CVSS 3.5, LOW). The reme...