NotCVE-2026-0009

nitroshare में पाथ ट्रैवर्सल भेद्यता विवरण NitroShare Desktop v0.3.4 में उसके LAN फ़ाइल ट्रांसफ़र सर्वर में एक पाथ ट्रैवर्सल भेद्यता मौजूद है। सर्वर बिना प्रमाणीकरण के सभी नेटवर्क इंटरफ़ेस पोर्ट 40818 पर सुनता है। फ़ाइलें प्राप्त करते समय, प्रेषक के JSON आइटम हेडर से name फ़ील्ड को यह सत्यापित कि...

CVE-2013-6987

CVE-2013-6987 Synology DiskStation Manager DSM 4.3-3810 अपडेट 3 से पहले के संस्करणों में FileBrowser घटकों में कई डायरेक्टरी ट्रैवर्सल भेद्यताएं हैं, जो दूरस्थ हमलावरों को .. डॉट डॉट के माध्यम से मनमानी फ़ाइलों को पढ़ने, लिखने और हटाने की अनुमति देती हैं। उपयोग: root@kitploit: python example: lis...

Preproduce-CVE-2021-41773

CVE 2021-41773 को पुनरुत्पादित करें Apache HTTP Server 2.4.49 में पथ ट्रैवर्सल और फ़ाइल प्रकटीकरण भेद्यता CVE-2021-41773 POC root@kitploit: $ docker compose up पुष्टि करें कि यह काम करता है root@kitploit: $ curl -I http://localhost HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 13:25:18 GMT Server:...

CVE-2024-4956-PoC

title="Nexus रिपॉजिटरी मैनेजर" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2023-32315

CVE-2023-32315 root@kitploit: GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...

CVE-2026-79781

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

CVE-2026-79781

rclone serve s3 before version 1.74.4 contains a path traversal vulnerability in its handling of S3 object keys. An unauthenticated, network-based attacker can include dot-dot (../) segments in object key names (e.g., ../root-secret.txt) to escape the bucket namespace and read or overwrite files ...

EUVD-2026-65539

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

CVE-2026-79781 rclone serve s3 Path Traversal via dot-dot object keys

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

CVE-2021-43798

CVE-2021-43798 1. सारांश Grafana एक ओपन-सोर्स प्लेटफ़ॉर्म है जो डेटा मॉनिटरिंग और प्रबंधन का समर्थन करता है। निम्नलिखित संस्करणों में, ../ जैसे विशेष वर्णों का उपयोग करके फ़ाइल पथों में हेरफेर करने की अनुमति देने वाला एक पथ ट्रैवर्सल Path Traversal दोष मौजूद है: 8.0.0 और उससे ऊपर, लेकिन 8.0.7 से...

CVE-2002-0347

CVE-2002-0347 ثغرة اجتياز الدليل في Cobalt RAQ 4 تسمح للمهاجمين عن بُعد بقراءة الملفات المحمية بكلمة مرور، وربما الملفات خارج جذر الويب، عبر .. نقطتان في طلب HTTP. منشور Packetstorm على https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html منشور SecurityFocus على...

CVE-2001-0931

CVE-2001-0931 Cooolsoft PowerFTP सर्वर 2.03 में डायरेक्ट्री ट्रैवर्सल भेद्यता हमलावरों को 1 LS या 2 GET में .. डॉट डॉट के माध्यम से मनमानी फ़ाइलों और निर्देशिकाओं को सूचीबद्ध करने या पढ़ने की अनुमति देती है। SecurityFocus प्रकाशन https://www.securityfocus.com/bid/3593/info पर Securiteam प्रकाशन...

CVE-2025-24813

CVE-2025-24813 - Apache Tomcat पथ समतुल्यता भेद्यता Apache Tomcat, पथों में ../ अनुक्रमों के अनुचित हैंडलिंग के कारण पथ समतुल्यता / पथ भ्रमण समस्या के लिए संवेदनशील है। CVE आईडी: CVE-2025-24813 गंभीरता: गंभीर संदर्भ लिंक: https://github.com/advisories/GHSA-83qj-6fr2-vhqg PoC चरण: 1. PUT विधि के...

CVE-2026-71313

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...

CVE-2026-71313 rclone: Local Encoding Path Traversal

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...

CVE-2026-71313 rclone: Local Encoding Path Traversal

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...

rclone: Path traversal in serve s3 allows reading and overwriting root-level files

Summary rclone serve s3 allows a client to read and write files at the root of the remote which would normally be inaccessible by using dot-dot path segments in the object key. It does not allow reading files outside of the root. A request such as GET /bucket/../root-secret.txt is handled as an...

GHSA-8V25-V8P6-QF7V rclone: Path traversal in serve s3 allows reading and overwriting root-level files

Summary rclone serve s3 allows a client to read and write files at the root of the remote which would normally be inaccessible by using dot-dot path segments in the object key. It does not allow reading files outside of the root. A request such as GET /bucket/../root-secret.txt is handled as an...

CVE-2026-12942

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-12942

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...