CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server 디렉터리 트래버설 Spring Cloud Config 2.1.2 이전의 2.1.x 버전, 2.0.4 이전의 2.0.x 버전, 1.4.6 이전의 1.4.x 버전 및 지원이 종료된 구버전에서는 spring-cloud-config-server 모듈을 통해 애플리케이션이 임의의 구성 파일을 제공할 수 있습니다. 악의적인 사용자 또는 공격자는 특수하게 조작된 URL로 요청을 보내 디렉터리 트래버설 공격을 유발할 수 있습니다. 발견자: Vern...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. id: CVE-2015-9406 info: name: mTheme Unus 2.3 - Directory Traversal...

Fedora 44 : buildstream (2026-ccf62cb9b3)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ccf62cb9b3 advisory. CVE-2026-82331 CWE-59: tar source plugin symlink escape while fetching a malicious tarball Python = 3.12, so the packaged /usr/bin/bst was already using...

EUVD-2026-90975

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php wfufiledownloader.php 파일로 접근, WordPress File Upload Solution poc, 솔루션 취약점 발생, 임의로 파일에 접근하여 조작하거나 수정할 수 있음...

ktor-cve-2023-45612-poc

Ktor XXE 취약점 개념 증명 CVE-2023-45612 요약 영향: 외부 엔티티XXE 참조가 포함된 조작된 XML DTD를 통한 임의 파일 접근. 근본 원인: 안전하지 않은 XML 문서 파서. 이 저장소에는 외부 엔티티를 허용하도록 구성된 취약한 Ktor 2.3.4 앱이 포함되어 있어 XXE 효과를 확인할 수 있습니다. 설명 XML 외부 엔티티 주입CVE-2023-45612 개념 증명을 위한 취약한 Ktorv2.3.4 애플리케이션입니다. CVE-2023-45612는 XML이 활성화된 2.3.5 이전 버전의 Ktor...

CVE-2024-23334-PoC

CVE‑2024‑23334 경로 탐색 - PoC 이 스크립트는 Hack The Box Chemistry 머신에서 CVE‑2024‑23334 의 악용을 자동화하기 위해 제작했습니다. 이 취약점은 애플리케이션이 followsymlinks=True로 정적 파일을 제공하도록 구성된 경우 aiohttp 버전 ≥ 1.0.5 및 3.9.2에 영향을 미치며, 원격 디렉터리 탐색 및 서버의 임의 파일에 대한 무단 액세스를 허용합니다...

AlmaLinux 9.6 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.6:CLSA-2026:1790035964)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790035964 advisory. - In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated...

CentOS Linux 8.5 [TuxCare] Security Update: git / git-all / git-core / git-core-doc / git-credential-libsecret / etc (CENTOS8.5:CLSA-2026:1768393530)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1768393530 advisory. - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source...

Rocky Linux 8 [CIQ] Security Update: perl-Archive-Tar (crlsa-2026_30852)

The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202630852 advisory. perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access CVE-2026-42496 Tenable has extracted the preceding description...

CVE-2026-51853

Versions 1.7, 1.8, 1.9, and 1.10 of agent-zero are vulnerable to a Directory Traversal flaw in python/helpers/file_browser.py:FileBrowser.__init__. The vulnerability exists because the FileBrowser class initializes with the host root directory as the workspace, granting the agent unrestricted acc...

Rocky Linux 9.6 [TuxCare] Security Update: perl-Archive-Tar (ALMALINUX9.6:CLSA-2026:1783078783)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783078783 advisory. - Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...

CVE-2026-102242

The Google MCP Toolbox for Databases (versions 1.2.0 through 1.9.0 ) is vulnerable to a path traversal flaw due to improper link resolution (CWE-59 / CWE-22 ) in the allowedLocalRoots path validation. Because the system performs lexical path validation without first resolving symbolic links , a r...

CVE-2026-102335 Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config

Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...

Directory Traversal

Overview decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal via symlink extraction in index.js, where symlinks whose targets resolve outside the output directory are not validated before being written to disk. ...

CVE-2026-65400

CVE-2026-65400 久しぶりに、MacOS で RCE が出ました。 元々は @osxreverser によって発見され、後に bynar.io によって拡張されました。詳細は https://blog.calif.io/p/no-country-for-old-passwords を参照してください。 これは主に、読み取り専用の PoC を公開した @panchocosil（いや、Claude...）の作業に由来しています。@HORKimhab のリポジトリは少し怪しいようです。特に get-svn.sh は後からサプライチェーン攻撃を仕掛ける試みのように見えます。...

ulteriusExploit

ulteriusExploit CVE-2017-16806을 위한 Python 익스플로잇 Ulterius Server 1.9.5.0 디렉터리 트래버설 임의 파일 액세스 익스플로잇 Rick Osgood 제작 CVE-2017-16806...

cve-2024-38819

CVE-2024-38819 01. File-Traversal와 Webflux 개요 1 File-Traversal과 WebFlux 개요 File-Traversal경로 탐색, Path Traversal 취약점은 공격자가 웹 애플리케이션에서 파일 시스템의 권한을 우회하여 임의의 파일에 접근할 수 있도록 하는 취약점 이며 CWE-22로 지정 되어있는 공격의 일종 입니다. Spring WebFlux는 Spring 5에서 도입된 리액티브 프로그래밍을 지원하는 모듈로, 비동기 논블로킹 애플리케이션 개발을 지원하며 WebFlux.fn은 함수...

CVE-2026-97360

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro...