CVE-2025-30208-Vite

CVE-2025-30208 | Viteスクリプト このツールは、対象システムが CVE-2025-30208 の脆弱性を持っているかどうかを検出するために使用されます。この脆弱性により、攻撃者は特定のパスを通じてサーバー上の機密ファイル（/etc/passwd や C:\windows\win.ini など）を読み取ることができます。このツールは単一 URL の検出とバッチ検出をサポートし、HTTP/HTTPS プロキシをオプションで使用できます。 ここでは payload ?raw?? と ?import?raw?? の関係を紹介します。最初の payload...

CVE-2023-34843

CVE-2023-34843 の開示 traggo/server バージョン 0.3.0 はディレクトリトラバーサルに対して脆弱です。 再現手順: 1. エンドポイント/サーバーに traggo/server をセットアップします。 https://traggo.net/install/ 2. 次のURLにGETリクエストを送信します。 curl -X GET http://localhost:3030/static/..%5c..%5c..%5c..%5cetc/passwd 3. /etc/passwd の内容を表示します。...

CVE-2021-41773

CVE-2021-41773 Apache HTTP Server 2.4.49 におけるパストラバーサルおよびファイル開示の脆弱性 使用方法 python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com 参考 https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited...

CVE-2026-88789 Apache Camel Quarkus: Camel Quarkus: Forced Xalan TransformerFactory drops upstream external-DTD/stylesheet hardening

Improper Restriction of XML External Entity Reference in the XSLT support extension camel-quarkus-support-xalan in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 before 3.40.0 on all platforms allows an attacker who supplies the XML document being transformed to read local files or...

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF とローカルファイル開示 概要 このリポジトリは CVE‑2024‑58258 の概念実証を提供します。これは SugarCRM（13.0.4 / 14.0.1）において、ユーザー入力が /css/preview API で LESS として解析される脆弱性であり、認証なしの SSRF またはローカルファイルアクセスを可能にします。 影響を受けるバージョン 13.0.4 より前のすべての商用エディション 14.0.1 より前のすべての商用エディション 説明 SugarCRM は /css/preview REST...

Unauthenticated Arbitrary File Disclosure

org.apache.wicket, wicket-core is vulnerable to an unauthenticated arbitrary file disclosure. The vulnerability is due to improper validation of attacker-controlled locale, style, and variation URL attributes before they are appended to the resource path, which allows an attacker to use path...

CVE-2020-3452-Cisco-Python-Scanner

CVE-2020-3452 スキャナー Cisco ASA / FTD WebVPN ディレクトリトラバーサル CVE-2020-3452 のための安全で非破壊的な Python スキャナーです。 CVE-2020-3452 は、リモート攻撃者が Cisco ASA または FTD デバイス上の任意のファイルを読み取ることを可能にする、重要な認証不要のパストラバーサル脆弱性です。 概要 このツールは、WebVPN...

Rocky Linux 9.6 [TuxCare] Security Update: assertj-core / assertj-core-javadoc (ALMALINUX9.6:CLSA-2026:1788370561)

"The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788370561 advisory. - AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine JVM. Starting in version 1.4.0 and prior to version...

Rocky Linux 9.6 [TuxCare] Security Update: inkscape / inkscape-docs / inkscape-view (ALMALINUX9.6:CLSA-2026:1787131590)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787131590 advisory. - A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1788972757)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788972757 advisory. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker w...

Rocky Linux 9 [CIQ] Security Update: yelp / yelp-debuginfo / yelp-debugsource / yelp-devel / yelp-libs / etc (crlsa-2026_47178)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647178 advisory. yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications CVE-2026-13601 Tenable has extracted the...

AlmaLinux 9.6 [TuxCare] Security Update: inkscape / inkscape-docs / inkscape-view (ALMALINUX9.6:CLSA-2026:1787131590)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787131590 advisory. - A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read loca...

Rocky Linux 8 [CIQ] Security Update: yelp / yelp-debuginfo / yelp-debugsource / yelp-devel / yelp-libs / etc (crlsa-2026_47177)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647177 advisory. yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications CVE-2026-13601 Tenable has extracted the...

CVE-2026-102127

An XML parser used by Kiteworks Email Protection Gateway did not restrict external entity references. Where an optional, non-default message-processing feature is enabled, a remote and unauthenticated sender could potentially use a crafted message to read files accessible to the gateway service...

CVE-2026-102991

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...

CVE-2026-102127

The Kiteworks Email Protection Gateway is vulnerable to an XML External Entity (XXE) injection due to an XML parser that does not restrict external entity references. If an optional, non-default message-processing feature is enabled, a remote and unauthenticated sender could submit a crafted mess...

CVE-2026-102127 Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference

An XML parser used by Kiteworks Email Protection Gateway did not restrict external entity references. Where an optional, non-default message-processing feature is enabled, a remote and unauthenticated sender could potentially use a crafted message to read files accessible to the gateway service...

CVE-2026-102991 Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...

CVE-2026-102991 Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...

CVE-2026-102991 Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath, while Template.init in mako/template.py validates them with os.path, which uses ntpath. A URI beginning with a drive designator causes ntpa...