Lucene search
+L

2532 matches found

NVD
NVD
added 2026/09/14 7:17 a.m.4 views

CVE-2026-82765

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

8.6CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/14 6:45 a.m.7 views

CVE-2026-82765

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

8.6CVSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.20 views

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

8.5CVSS5.9AI score0.01541EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 11:31 p.m.7 views

ulteriusExploit

ulteriusExploit Python exploit for CVE-2017-16806 Ulterius Server 1.9.5.0 directory traversal Arbitrary File Access exploit By Rick Osgood CVE-2017-16806...

7.5CVSS7.5AI score0.91496EPSS
SaveExploits6
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.42 views

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. id: CVE-2015-9406 info: name: mTheme Unus 2.3 - Directory Traversal...

7.5CVSS7.5AI score0.55008EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/13 2:05 a.m.6 views

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versiones 2.1.x anteriores a 2.1.2, versiones 2.0.x anteriores a 2.0.4, versiones 1.4.x anteriores a 1.4.6, y versiones antiguas sin soporte, permiten a las aplicaciones servir archivos de configuración arbitrario...

6.5CVSS6.5AI score0.85295EPSS
SaveExploits6References1
CVE
CVE
added 2026/09/13 12:00 a.m.9 views

CVE-2026-36453

Rhymix before version 2.1.31 is affected by an insecure direct object reference (IDOR) vulnerability, tracked internally as RVE-2026-1 . The flaw allows arbitrary file access via extra variables , meaning a low-privileged user can manipulate request parameters to read files outside the intended s...

7.4CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/13 12:00 a.m.17 views

CVE-2026-36453

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables...

7.4CVSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/13 12:00 a.m.5 views

PT-2026-90959

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables...

7.4CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/13 12:00 a.m.8 views

EUVD-2026-77109

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables...

7.4CVSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 3:17 p.m.7 views

CVE-2026-87988

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval...

10CVSS0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/11 2:35 p.m.36 views

CVE-2026-87988

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval...

10CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 2:35 p.m.49 views

CVE-2026-87988

Mistral Vibe is affected by an arbitrary file access vulnerability (CVE-2026-87988). The root cause is missing path validation for commands classified as unconditionally allowed , which allows an attacker to bypass workspace restrictions and access files outside the active workspace without user ...

10CVSS0.00254EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/11 2:35 p.m.11 views

EUVD-2026-76123

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unconditionally allowed. Missing path validation for these commands enables access to files outside the active workspace without user approval...

10CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 12:00 a.m.9 views

CVE-2025-69904

Linkstack v4.8.4 and earlier is affected by a Path Traversal vulnerability. An administrator with access to the application can read arbitrary files on the server by manipulating file path input, potentially gaining unauthorized access to sensitive system or application files. No specific patch v...

0.00149EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 7:35 p.m.9 views

cve-2024-38819

CVE-2024-38819 01. Descripción general de File-Traversal y WebFlux 1 Descripción general de File-Traversal y WebFlux La vulnerabilidad de File-Traversal también conocida como Path Traversal es un tipo de ataque designado como CWE-22 que permite a un atacante eludir los permisos del sistema de...

7.5CVSS6.7AI score0.54862EPSS
SaveExploits6
Cvelist
Cvelist
added 2026/09/10 3:28 p.m.42 views

CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

8.8CVSS0.00517EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/10 3:28 p.m.14 views

CVE-2026-88937

knowns through version 0.33.0 is affected by a path traversal vulnerability in its code generation template engine (internal/codegen/template_engine.go). The engine fails to properly validate template destination paths, allowing an attacker who supplies a malicious template to read and write arbi...

8.8CVSS0.00517EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/10 3:28 p.m.9 views

CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

8.6CVSS6.2AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/10 4:15 a.m.6 views

CVE-2024-23334-PoC

CVE‑2024‑23334 Recorrido de Directorios - PoC Creé este script para automatizar la explotación de CVE‑2024‑23334 en la máquina Chemistry de Hack The Box. Esta vulnerabilidad afecta a aiohttp versiones ≥ 1.0.5 y 3.9.2 cuando la aplicación está configurada para servir archivos estáticos con...

7.5CVSS6.8AI score0.76875EPSS
SaveExploits18
Rows per page
Query Builder