CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script Beschreibung CVE-2024-24919 ist eine Schwachstelle in Check Point Security Gateway-Geräten, die unberechtigten Zugriff auf sensible Dateien durch Ausnutzung von Path Traversal ermöglicht. Diese Schwachstelle erlaubt es Angreifern, bestimmte Dateiinhalte im Zielsyst...

CVE-2025-3054-Exploit

CVE-2025-3054 الاستغلال: تحميل هنا التفاصيل معرف CVE : CVE-2025-3054 نشر : 5 يونيو 2025 CVSS : 8.8 التصحيح متوفر: لا يوجد تصحيح رسمي حتى الآن التأثير إضافة WP User Frontend Pro لـ WordPress معرضة لرفع الملفات بشكل عشوائي بسبب عدم التحقق من نوع الملف في دالة uploadfiles في جميع الإصدارات حتى الإصد...

CVE-2026-55059

A flaw was found in OpenEXR, a widely used library for the EXR image format. A user processing a specially crafted image file could trigger a heap out-of-bounds write vulnerability in the SampleCountChannel::set function. This occurs due to an incorrect computation of the target Y coordinate,...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M Befehlsinjektions-Exploit Ein vollautomatisiertes Exploit-Skript für CVE-2025-69212 , eine Befehlsinjektions-Schwachstelle in OpenSTAManager. Dieses Skript authentifiziert sich mit Admin-Zugangsdaten, lädt eine schädliche PHP-Webshell über eine präparierte...

CVE-2025-48384-POC

Per attivare, esegui git clone --recursive https://github.com/fishyyh/CVE-2025-48384-POC.git su una versione vulnerabile di git e troverai un file /tmp/sectest che appare improvvisamente...

CVE-2026-55527

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized userid into self.userpath. A caller supplying ../ or path separators can escape the memory directory and write JSON data to arbitrary process-writable locations. The fix sanitize...

CVE-2026-16286

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

EUVD-2026-65542

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiateclass in vocos/pretrained.py takes the classpath value from the configuration, splits it into a module and an attribute, imports the module with import, resolves the attribute with...

CVE-2026-79781

rclone serve s3 before version 1.74.4 contains a path traversal vulnerability in its handling of S3 object keys. An unauthenticated, network-based attacker can include dot-dot (../) segments in object key names (e.g., ../root-secret.txt) to escape the bucket namespace and read or overwrite files ...

EUVD-2026-65539

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

CVE-2026-79781 rclone serve s3 Path Traversal via dot-dot object keys

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

CVE-2026-79781 rclone serve s3 Path Traversal via dot-dot object keys

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys. Attackers can send requests with object keys like ../root-secret.txt to escape the bucket namespace and access files in t...

EUVD-2026-65531

Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manageassets permission to disclose arbitrary server-readable files by placing =include or =require directives in theme JavaScript assets. Attackers can...

CVE-2026-79773

Winter CMS before 1.2.13 is affected by a local file inclusion vulnerability in the JavascriptImporter filter . Authenticated users holding the cms.manage_assets permission can embed =include or =require directives in theme JavaScript assets, referencing files outside the theme directory (e.g., ....

CVE-2026-79773 Winter CMS before 1.2.13 Local File Inclusion via JavaScript

Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manageassets permission to disclose arbitrary server-readable files by placing =include or =require directives in theme JavaScript assets. Attackers can...

CVE-2026-79773 Winter CMS before 1.2.13 Local File Inclusion via JavaScript

Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manageassets permission to disclose arbitrary server-readable files by placing =include or =require directives in theme JavaScript assets. Attackers can...

CVE-2026-79674

NLTK (Natural Language Toolkit) versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader , allowing them to read filesystem content and SQLite databases...

CVE-2026-79674 NLTK 3.10.2 Path Traversal via corpus-reader constructors

NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root. Attackers can supply arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors to access...

praisonaiagents vulnerable to arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location

Summary praisonaiagents/memory/filememory.py::FileMemory.init constructs all memory file paths by directly joining the userid parameter to a base path: python self.userpath = self.basepath / userid LINE 145 — no sanitization No validation or normalization is applied to userid before the path join...

CVE-2026-55527

CVE-2026-55527 is a path traversal vulnerability in PraisonAI (praisonaiagents), a multi-agent teams system. In versions prior to 1.6.58 , the FileMemory constructor (__init__()) joins an unsanitized user_id directly into self.user_path. An attacker supplying ../ sequences or path separators can ...