cve-2021-42013-httpd

Dockerisation d'une Vulnérabilité : cve-2021-42013 Ce projet vise à dockeriser une vulnérabilité spécifique en utilisant Docker. L'objectif est de créer un environnement isolé dans lequel la vulnérabilité peut être exploitée et testée de manière sécurisée. Application vulnérable Apache HTTP Serve...

CVE-2026-19794

CVE-2026-19794 WP-Stats = 2.56 - Неаутентифицированное хранимое межсайтовое скриптовое внедрение URL плагина https://wordpress.org/plugins/wp-stats/ Описание Неаутентифицированное отражённое XSS в GET-параметре statsauthor функции statspage. Фильтр очистки striptags применяется до urldecode, что...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 — это критическая уязвимость в веб-интерфейсе Cisco IOS XE, позволяющая неаутентифицированному удаленному злоумышленнику создать учетную запись с привилегиями уровня 15 на уязвимом устройстве, полностью захватив контроль над ним. Уязвимость возникает из-за...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE через modcgi обход патча Только для использования в контролируемых и собственных средах. Не использовать против систем без авторизации. Описание PoC разработана для демонстрации CVE-2021-42013 , присутствующего в Apache HTTP Server 2.4.50. Этот CVE...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Weblogic: неавторизованный обход аутентификации и RCE CVE-2020-14882 Тестовый скрипт для проверки неавторизованного обхода аутентификации и RCE в Oracle Weblogic Работает на Python3 Запрос POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0...

CVE-2021-42013

CVE-2021-42013 Автор 석은호@eunho87 CVE-2021-42013 Обход пути в Apache http Server Краткое описание уязвимости Из-за ошибки в обработке нормализации путей в Apache HTTP Server 2.4.50 можно без аутентификации читать произвольные файлы или выполнять удаленный код. Возникла из-за неполного исправления...

WordPress WP-Stats 2.5.6 Cross Site Scripting

WordPress WP-Stats plugin versions 2.5.6 and below suffer from a persistent cross site scripting vulnerability. https://packetstorm.news/download/231119...

VulnCheck KEV: CVE-2026-54066

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

SUSE CVE-2026-54066

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

GO-2026-5964 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894 in github.com/siyuan-note/siyuan/kernel

SiYuan: Path Traversal via Double URL Encoding in /assets/path publish mode arbitrary file─read, Incomplete fix of CVE-2026-41894 in github.com/siyuan-note/siyuan/kernel...

EUVD-2026-39122

SiYuan: Path Traversal via Double URL Encoding in /assets/path publish mode arbitrary file─read, Incomplete fix of CVE-2026-41894...

CVE-2026-54066 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

CVE-2026-54066

SiYuan (

CVE-2026-54066: Improper Limitation of a Pathname to a Restricted Directory

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

PT-2026-52107

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.0 Description An unauthenticated remote attacker can read arbitrary files within the WorkspaceDir when the system is in publish mode, which is an anonymous read-only HTTP endpoint. This is achieved by using...

EUVD-2026-25626

SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...

CVE-2026-41894 SiYuan: Incomplete Fix Bypass for CVE-2026-30869: Path Traversal via Double URL Encoding in `/export/` Endpoint

SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...

CVE-2026-41894: Improper Limitation of a Pathname to a Restricted Directory

SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...

CVE-2025-70936

Vtiger CRM 8.4.0 contains a reflected cross-site scripting XSS vulnerability in the MailManager module. Improper handling of user-controlled input in the folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s...

CVE-2025-70936

Vtiger CRM version 8.4.0 is vulnerable to a reflected cross-site scripting (XSS) flaw in the MailManager module. The root cause is the improper handling of user-controlled input within the _folder parameter, which allows an attacker to deliver a specially crafted, double URL-encoded payload . Thi...