CVE-2026-102141 Kiteworks Core Privilege Escalation through External Control of File Name or Path

Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto another node and cause them to be executed there. Exploitation requires backend root access on a cluster node and a...

CVE-2026-10726

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...

EUVD-2026-89780

Cato Windows SDP Client before version 6.12.6 contains an arbitrary file disclosure vulnerability. A low-privileged local user can cause the Windows service, running as Local System, to read and disclose arbitrary local files due to improper file path validation and missing TLS certificate...

CVE-2026-10726

The Cato Windows SDP Client before version 6.12.6 is vulnerable to an arbitrary file disclosure vulnerability. A low-privileged local user can exploit this flaw to force the Windows service—which operates with Local System privileges—to read and disclose arbitrary local files. The root cause is a...

CVE-2025-30208

CVE-2025-30208 !IMPORTANT 면책 조항 이 익스플로잇은 교육 및 윤리적 보안 테스트 목적으로만 제공됩니다. 사전 상호 동의 없이 대상을 공격하는 데 이 익스플로잇을 사용하는 것은 불법이며, 개발자는 이 익스플로잇으로 인한 오용 또는 피해에 대해 어떠한 책임도 지지 않습니다. 설치 git clone https://github.com/On1onss/CVE-2025-30208.git cd CVE-2025-30208 pip install -r requirements.txt 사용법 python...

CVE-2026-84414: Incorrect Permission Assignment for Critical Resource

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x: Обход пути без аутентификации Вся заслуга принадлежит j0v и его твиту https://twitter.com/j0v0x0/status/1466845212626542607 Отказ от ответственности Это только для образовательных целей. Я не несу ответственности за ваши действия. Используйте на свой страх и риск...

CVE-2026-73642 Path Traversal in Dayforce Payroll

Dayforce Payroll is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute local file path. Because vendor contact attempts were unsuccessful, the vulnerability has only been...

CVE-2026-73642

The Dayforce Payroll software is vulnerable to a Path Traversal flaw within its file download functionality. An unauthenticated attacker can exploit this by sending a GET request with a manipulated file path parameter, potentially allowing access to any path, including absolute local file paths ....

CVE-2026-73642 Path Traversal in Dayforce Payroll

Dayforce Payroll is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute local file path. Because vendor contact attempts were unsuccessful, the vulnerability has only been...

CVE-2026-90817

CVE-2026-90817 — REDCap 설문 Passthru + 데이터 가져오기 RCE CVE-2026-90817 Securifera / Ryan Wincey에 대한 Python 3 검사기및 구성 가능한 익스플로잇 훅. | ---|--- 제품| REDCap Vanderbilt 영향 받는 버전| ≥ 13.3.0 브랜치 패치 전까지 수정 버전| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical 인증| 없음 — 전체 체인에는 유효한 공개 설문 해시s= 필요 CW...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

CVE-2024-34102

CVE-2024-34102 Использование python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Python 3 검사기및 구성 가능한 익스플로잇 훅 — CVE-2026-90817 Securifera / Ryan Wincey용. | ---|--- 제품| REDCap Vanderbilt 영향 받는 버전| ≥ 13.3.0 브랜치 패치 전까지 수정 버전| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical 인증| 없음 — 전체 체인에는 유효한 공개 설문 해시s=...

CVE-2017-1000028

CVE-2017-1000028 GlassFish4.1.14.1.1 미포함에 대한 POC&EXP. 매개변수: -u: 단일 URL /etc/passwd 출력 없음 -ut: 단일 URL /etc/passwd 출력 포함 -f: url.txt에서 URL을 읽어 취약한지 확인 -c: 반드시 "-u" 매개변수와 함께 사용. 예: python3 CVE-2017-1000028.py -u http://xxx.xxx.xxx.xxx:4848 -c /etc/hello.txt Python3에서 실행. 코딩 실력이 너무 안 좋아서... 이걸 쓸 때 욕하...

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: 임의 파일 읽기 취약점 이 코드는 공격 요청과 응답 조합을 이해하는 데 도움이 됩니다. 프록시 도구를 사용하여 결과를 확인하세요. python3 CVE-2024-23897.py -u $url -p $filepathtoread...

CVE-2026-100526

OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...

CVE-2026-100526 Vulnerability in discord

OpenClaw's Discord integration npm package @openclaw/discord before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenClaw to read a host path that the same...

CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

DEBIAN-CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...