CVE-2026-59291 Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-76219

A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the git read-tree command through methods like IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree, without proper option validation or...

exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana Exploit Über Dies ist ein Proof-of-Concept-Exploit für die Schwachstelle, die ein unbefugtes Lesen beliebiger Dateien in Grafana ermöglicht CVE-2021-43798. Diese Schwachstelle betrifft Grafana 8.0.0-beta1 to 8.3.0. Laut Shodan-Daten sind etwas mehr als 2.000 Grafana-Serve...

CVE-2026-76217

A flaw was found in GitPython where it fails to properly validate options provided to its git rm and git checkout commands. A remote attacker with low privileges could exploit this by supplying crafted parameters, such as --pathspec-from-file and --pathspec-file-nul. This vulnerability allows for...

CVE-2023-1177-PoC-reproduce

MLflow CVE-2023-1177 - PoC e Riproduzione Questo repository contiene il codice Proof-of-Concept PoC e le istruzioni per riprodurre la vulnerabilità Local File Inclusion LFI in MLflow, identificata come CVE-2023-1177. Informazioni sulla vulnerabilità: CVE ID: CVE-2023-1177 Tipo di vulnerabilità:...

libreoffice-convert vulnerable to path traversal / arbitrary file write

Impact options.fileName is used to build a filesystem path path.jointempDir.name, fileName and the caller-supplied document buffer is written there, but fileName is never reduced to a base name. A fileName containing "../" escapes the temporary directory, so a caller can write arbitrary content t...

NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write

NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write vulnerability discovered by ? in WordPress Npm libreoffice-convert versions 1.8.2...

CVE-2026-54732 libreoffice-convert: path traversal / arbitrary file write

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2026-54732

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2 , the options.fileName value passed to path.join(tempDir.name, fileName) in index.js is never reduced to a base name. A filename containing ../ allows an attacker to escape the temporary d...

EUVD-2026-67161

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2026-54732 libreoffice-convert: path traversal / arbitrary file write

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Strumento di exploit per la vulnerabilità di lettura arbitraria di file di Adminer 1.0 fino a 4.6.2 Installazione root@kitploit: git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Utilizzo...

CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

CVE-2021-31800 - Impacket SMB Server Beliebiges Lesen/Schreiben von Dateien CVSS-Vektor : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS-Score : 9.9 Kritisch Beschreibung Eine Pfad-Traversal-Schwachstelle in smbserver.py ermöglicht es einem Angreifer, auf dem Server beliebige Dateien zu lesen...

CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Descrição Este exploit demonstra uma vulnerabilidade de upload irrestrito de arquivos no Chamilo-LMS. A vulnerabilidade afeta a funcionalidade de upload de arquivos grandes localizada em: root@kitploit: /main/inc/lib/javascript/bigupload/inc/bigUpload.php Versões...

n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

GHSA-Q7M3-RHXG-7VXR n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

EUVD-2026-67158

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2024-34470

CVE-2024-34470 Beschreibung: Ein nicht authentifizierter Benutzer kann eine Pfad-Traversal-Schwachstelle in der Datei /public/loader.php ausnutzen. Der Parameter path filtert nicht ordnungsgemäß, ob die übergebenen Dateien und Verzeichnisse Teil des Webroot sind, sodass ein Angreifer beliebige...

CVE-2026-76222

A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule...

CVE-2024-2928

CVE-2024-2928 Exploit di lettura arbitraria dei file per CVE-2024-2928 in mlflow nello specifico nella versione 2.9.2, corretta nella versione 2.11.3 Il codice dell'exploit è stato testato su Linux Fonte: https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298 Uso: python3 CVE-2024-2928.p...