ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2026-104068

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craf...

CVE-2025-65346

CVE-2025-65346 – Authenticated Path Traversal From UnZip Function Leading to Arbitrary File Write in laravel-file-manager v3.3.1 🧭 Overview A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem...

CVE-2022-20128

CVE-2022-20128 Android Debug Bridge adb was vulnerable to directory traversal attacks that could have been mounted by rogue/compromised adb daemons during an adb pull operation. The rogue device: ./adbdirtrav.py -lp 5111 --content "hello world" --destination-path /etc/proof The victim:...

EUVD-2026-108228

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craf...

CVE-2026-104068 JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craf...

CVE-2026-104068

The JetBackup plugin for WordPress (versions before 3.1.24.10 ) is vulnerable to a symlink-based arbitrary file write flaw during the backup import and restore process. The root cause is the failure to validate symbolic links or enforce destination containment when extracting backup archives, all...

nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc

Summary nbconvert = v7.17.1 has an arbitrary file write vulnerability due to a path traversal in ipynb cell output metadata, more specifically on the filename attribute. Vulnerable converters : --to markdown, --to latex, --to rst, --to asciidoc. In ExtractOutputPreprocessor,...

GHSA-PJVX-PRJX-H659 nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc

Summary nbconvert = v7.17.1 has an arbitrary file write vulnerability due to a path traversal in ipynb cell output metadata, more specifically on the filename attribute. Vulnerable converters : --to markdown, --to latex, --to rst, --to asciidoc. In ExtractOutputPreprocessor,...

EUVD-2026-107551

nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc...

SysmonEoP

SysmonEoP Proof of Concept for arbitrary file delete/write in Sysmon CVE-2022-41120/CVE-2022-44704 Vulnerability Vulnerability is in code responsible for ClipboardChange event that can be reached through RPC. Local users can send data to RPC server which will then be written in C:\Sysmon director...

CVE-2021-33564

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument Injection in Dragonfly Ruby Gem. Usage Arbitrary File Read python3 poc.py -u https:///system/refinery/images -r /etc/passwd Arbitrary File Write python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:...

podman: Arbitrary file write when importing OCI archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

Important: Red Hat Security Advisory: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2022-30333-PoC

CVE-2022-30333-POC Sample file to test CVE-2022-30333 Sample.rar : if you want to test on Linux. When you extract, it create trav in ../../tmp/traversed. Please be sure that directory ../../tmp/traversed exists before extracting Sample.rar exp.rar : if you want to test on Zimbra Mail server. When...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "If exploited, the link following vulnerability could allow remote attackers who have gained user access to traverse the fi...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

CVE-2026-92709

The rsyslog log processing system (versions 1.15.0 to 8.2610.0 ) is vulnerable to a path traversal flaw within the omfile dynaFile facility. The issue arises when a dynaFile template uses untrusted input as a path component without explicit secure-path handling, allowing an attacker to escape the...

CVE-2026-92709 Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE

Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output paths. This supports valid deployments that route logs into different directories or use dynamically generated file...

cve-2025-65099

Proof of Concept for CVE-2025-65099 Further details are provided in the published article. yarnPath Technique A vulnerable environment for yarnPath can be initialized as follows: docker run --rm -v "$PWD":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq && DEBIANFRONTEND=noninteractive...