CVE-2026-85583 SiYuan before v3.8.2 Path Traversal via symlink in file API

SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...

CVE-2026-85583 SiYuan before v3.8.2 Path Traversal via symlink in file API

SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...

CVE-2026-85583

SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...

CVE-2026-85583 SiYuan before v3.8.2 Path Traversal via symlink in file API

SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace a...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707

A Path Traversal vulnerability in the builder endpoint of Google Cloud Agent Development Kit (ADK) versions 1.9.0 through 1.21.0 (Python) allows an unauthenticated remote attacker to read arbitrary files by supplying a crafted file_path query parameter. The CVSS 4.0 base score is 8.7 (HIGH) , ref...

EUVD-2026-70994

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707 Arbitrary File Read in Google Agent Development Kit (ADK)

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-79707 Arbitrary File Read in Google Agent Development Kit (ADK)

A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...

CVE-2026-74853

The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to read arbitrary files from the server, including files outside the web root. Only sites using the restricted display-callback mode are...

ManageEngine SDP - FileDownload.jsp fName File Read

Reads arbitrary files via ManageEngine ServiceDesk Plus FileDownload.jsp fName path traversal with null-byte truncation. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine ServiceDesk Plus FileDownload.jsp fName file read.""" from urllib.parse import quote from kittysploit import from...

WedgeOS - ssgimages File Read

Reads arbitrary files via WedgeOS = 4.0.4 /ssgmanager/ssgimages?name= traversal. !/usr/bin/env python3 -- coding: utf-8 -- """WedgeOS ssgimages name parameter file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi class...

Samsung WLAN AP WEA453e - File Read

Reads arbitrary files via the /download/ handler on Samsung WLAN AP WEA453e devices. !/usr/bin/env python3 -- coding: utf-8 -- """Samsung WLAN AP WEA453e download path file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi...

Sangfor NGAF - loadfile.php File Read

Reads arbitrary files via Sangfor Next Gen Application Firewall /svpnhtml/loadfile.php file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor NGAF loadfile.php arbitrary file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

EverFocus - Path Traversal File Read

Reads arbitrary files via EverFocus directory traversal using /../../../../../../ style paths. !/usr/bin/env python3 -- coding: utf-8 -- """EverFocus DVR/camera directory traversal file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.l...

Cuppa CMS - alertConfigField.php File Read

Reads arbitrary files via Cuppa CMS alerts/alertConfigField.php urlConfig traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Cuppa CMS alertConfigField.php urlConfig file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import...

GeoVision GeoHttpServer - Path Traversal File Read

Reads arbitrary files via GeoVision GeoHttpServer = 8.3.3.0 path traversal using /.../.../ style segments. !/usr/bin/env python3 -- coding: utf-8 -- """GeoVision GeoHttpServer path traversal file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

Webp Server Go - Path Traversal File Read

Reads arbitrary files via path traversal in Webp Server Go github.com/webp-sh/webpservergo. !/usr/bin/env python3 -- coding: utf-8 -- """Webp Server Go path traversal file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi...

Honeywell IP Camera - check.cgi File Read

Reads arbitrary files via Honeywell IP camera /check.cgi?file= traversal. !/usr/bin/env python3 -- coding: utf-8 -- """Honeywell IP camera check.cgi file parameter file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi cla...