CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acesso através do arquivo wfufiledownloader.php, WordPress File Upload Solution poc, ocorre uma vulnerabilidade na solução, é possível acessar, manipular ou modificar arquivos arbitrariamente...

ulteriusExploit

ulteriusExploit Exploit em Python para CVE-2017-16806 Exploit de directory traversal Acesso Arbitrário a Arquivos para Ulterius Server 1.9.5.0 Por Rick Osgood CVE-2017-16806...

cve-2024-38819

CVE-2024-38819 01. Visão geral de File-Traversal e WebFlux 1 Visão geral de File-Traversal e WebFlux A vulnerabilidade File-Traversal navegação de caminho, Path Traversal é uma vulnerabilidade que permite a um atacante contornar as permissões do sistema de arquivos em uma aplicação web e acessar...

ktor-cve-2023-45612-poc

Ktor XXE Vulnerability Proof-of-Concept CVE-2023-45612 Resumo Impacto: Acesso a arquivos arbitrários através de um DTD XML malicioso com referência XXE. Causa raiz: Analisador de documento XML inseguro. Este repositório contém uma aplicação Ktor 2.3.4 vulnerável configurada para permitir entidade...

CVE-2024-23334-PoC

CVE‑2024‑23334 Path Traversal - PoC Criei este script para automatizar a exploração do CVE‑2024‑23334 na máquina Chemistry do Hack The Box. Esta vulnerabilidade afeta aiohttp versões ≥ 1.0.5 e 3.9.2 quando a aplicação está configurada para servir arquivos estáticos com followsymlinks=True,...

CVE-2019-3799

CVE-2019-3799 - स्प्रिंग-क्लाउड-कॉन्फिग-सर्वर डायरेक्टरी ट्रैवर्सल स्प्रिंग क्लाउड कॉन्फिग, संस्करण 2.1.x 2.1.2 से पहले, संस्करण 2.0.x 2.0.4 से पहले, और संस्करण 1.4.x 1.4.6 से पहले, और पुराने असमर्थित संस्करण, स्प्रिंग-क्लाउड-कॉन्फिग-सर्वर मॉड्यूल के माध्यम से एप्लिकेशन को मनमाने कॉन्फ़िगरेशन...

CVE-2026-76198

CAI Content Credentials (Adobe) is affected by an Improper Input Validation flaw (CWE-20) that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction — a victim must open a m...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. id: CVE-2015-9406 info: name: mTheme Unus 2.3 - Directory Traversal...

CVE-2026-65400

CVE-2026-65400 Pela primeira vez em um bom tempo, temos um RCE no MacOS. Descoberto originalmente por @osxreverser, e posteriormente expandido por bynar.io. Veja https://blog.calif.io/p/no-country-for-old-passwords para mais informações. Isso é derivado principalmente do trabalho de @panchocosil...

CVE-2026-71932 DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function, caused by insufficient validation of the option field. A remote attacker with valid administrative credentials for the device's web management interface can supply crafted input containi...

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

CVE-2026-48749

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the issue...

CVE-2026-48752

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue...

CVE-2026-63343

Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a metadata.yaml symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The...

CVE-2026-63343 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a metadata.yaml symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The...

CVE-2026-48752 Incus has arbitrary file read+write on host via templates/ symlink in malicious image

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue...

CVE-2026-48752

Incus (a system container and virtual machine manager) prior to 7.2.0 is vulnerable to arbitrary file read and write on the host via a templates/ symlink planted in a malicious image or instance backup. This can lead to arbitrary command execution on the host. The CVSS v3.1 score is 9.9 (Critical...

CVE-2026-48752 Incus has arbitrary file read+write on host via templates/ symlink in malicious image

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue...