3800 matches found
Le Panthรฉon de la Souverainetรฉ
๐ Developed on: GitLab ยท ๐ช Mirror: GitHub ยท ๐ Website: pantheon-souverainete.eu ๐๏ธ The Pantheon of Sovereignty A 100% sovereign, redundant and secure cloud infrastructure, designed to break free entirely from the GAFAM. Version 2.1.0-alpha โ Full structural overhaul. Starting from scratch. ๐ Table...
EUVD-2026-107893
Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when auth-tls-secret names collide after dot-to-dash normalization. Attackers holding certificates from another host's CA can access a host requiring its...
cve-2021-41773-exploration
Overview CVE-2021-41773 is a path traversal vulnerability discovered in Apache HTTP Server 2.4.49 in October 2021. The root cause was a failure to properly normalize dot sequences ended into the URL before checking whether requested path stayed within the web root. This vulnerability allowed an...
dot
the Deepfake Offensive Toolkit dot aka Deepfake Offensive Toolkit makes real-time, controllable deepfakes ready for virtual cameras injection. dot is created for performing penetration testing against e.g. identity verification and video conferencing systems, for the use by security analysts, Red...
NotCVE-2026-0009
Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...
CVE-2026-110095
A flaw was found in fast-uri. The library improperly applies dot-segment removal to relative Uniform Resource Identifier URI paths during normalization, causing leading parent-directory segments to be discarded. A remote attacker could supply a crafted relative path to an application that relies ...
CVE-2021-43798
CVE-2021-43798 1. Summary Grafana is an open-source platform that supports data monitoring and management. In the versions listed below, a Path Traversal vulnerability exists that allows manipulation of file paths using special characters such as ../. 8.0.0 and above, below 8.0.7 8.1.0 and above,...
CVE-2013-6987
CVE-2013-6987 Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager DSM before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. dot dot Usage: python example: list filesystem python filelist.py...
CVE-2021-41773
CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...
CVE-2023-45827
CVE-2023-45827 ์ทจ์ฝ์ ๊ฐ์ CVE-2023-45827 CVSS : 9.8 Nov 3, 2023 ProtoType Pollution in node.js package rebob ํ๋ก์ ํธ์ ์ผํ ์ทจ์ฝ์ ์ค๋ช github advisories This is a Prototype PollutionPP vulnerability in dot-diver. It can leads to RCE. vulnerable code...
CVE-2023-32315
CVE-2023-32315 GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...
CVE-2001-0931
CVE-2001-0931 Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. dot dot in 1 LS or 2 GET. SecurityFocus publication at https://www.securityfocus.com/bid/3593/info Securiteam publication at...
CVE-2002-0347
CVE-2002-0347 Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. dot dot in an HTTP request. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...
ioc2rpz
ioc2rpzโข makes your threat intelligence actionable Table of Contents Short Summary Overview ioc2rpzโข is a place where threat intelligence meets DNS Architecture Overview How to use ioc2rpzโข ioc2rpzโข web interface Protocol Support Port Summary UDP Port 53 TCP Port 53 DNS over TLS / DoT Port 853 DN...
CVE-2025-24813
CVE-2025-24813 - Apache Tomcat Path Equivalence Vulnerability Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../ sequences in paths. CVE ID: CVE-2025-24813 Severity: Critical Reference link: https://github.com/advisories/GHSA-83qj-6fr2-vhqg Po...
Preproduce-CVE-2021-41773
Preproduce CVE 2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 POC $ docker compose up Confirm it works $ curl -I http://localhost HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 13:25:18 GMT Server: Apache/2.4.49 Unix Last-Modified: Mon, 11 Jun 2007...
CVE-2022-22978
CVE 2022-22978: Authorization Bypass in RegexRequestMatcher ๐ฅถ Overview According to the information I gathered, this is a vulnerability related to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...
pytm
pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...
CVE-2022-22978
CVE 2022-22978: Authorization Bypass in RegexRequestMatcher ๐ฅถ Overview According to the information I have gathered, this vulnerability relates to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...
CVE-2021-41773
https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex regex: -...