CVE-2023-33404

CVE-2023-33404 A user who has EditOwnPosts right on BlogEngine.NET CMS version 3.3.8.0 and earlier has the ability to upload a malicious file to a hard-coded location. POST request to /api/upload endpoint with "action=video" parameters, as shown in the screenshot below, triggers a file upload...

cve-2021-42013.get

Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...

CVE-2024-32113-Exploit

CVE-2024-32113 Exploit Apache OFBiz Path Traversal to RCE exploit. Description CVE-2024-32113 is a Path Traversal vulnerability that leads to Remote Code Execution RCE in Apache OFBiz. Vulnerability : Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in...

apache-vulnerable

Scan FOR APACHE versions "ZERO-DAY" Apache Version 2.4.49 and 2.4.50 CVE-2021-41773 and CVE-2021-42013 How to use : You Will need nuclei ! https://github.com/projectdiscovery/nuclei Check local nuclei install and verify template nuclei -t apache-vulnerable-versions.yaml -vv and nuclei -t...

POC-CVE-2021-42013-EXPLOIT

-ff0055?style=for-the-badge&logo=python 🔥 CVE-2021-42013 Exploit Framework by Makaveli 💀 Multidimensional Cosmic Hacker Mode activated... An advanced scanning, exploitation, and remote interaction tool designed to detect and exploit the Apache Path Traversal + RCE CVE-2021-42013 vulnerability in...

cve-2025-48384-poc

PoC for CVE-2025-48384 This proof-of-concept demonstrates Git's CR-path submodule misparsing vulnerability, leading to arbitrary hook execution during git clone --recurse-submodules. ⚠️ Warning This is for educational and testing purposes only. Do not run this on any production environment. 🧪 Usag...

OnlyOffice-path-traversal

ONLYOFFICE Path Traversal Exploit CVE-2023-46988 📌 Overview This script exploits a path traversal vulnerability in ONLYOFFICE Document Server CVE-2023-46988 that allows unauthorized users to copy arbitrary files from the server. The vulnerability exists in the /example/editor endpoint, where the...

Exploit for CVE-2026-117183

CVE-2026-117183 — Build-time RCE via FeaturedImage Path Traver...

CVE-2026-118756

gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to delete directories outside the password store via ../ entry names in Prune and IsDir. Collaborators with write access to a shared git-synced store can introduce crafted entries,...

health-check

health-check Health Check & Troubleshooting daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/usr/sbin/nologin ...

CVE-2021-41773-Apache-RCE

CVE-2021-41773-Apache-RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected b...

CVE-2026-119189

A flaw was found in node-forge. The certificate verification mechanism fails to enforce path length constraints on Certificate Authority CA certificates that lack a key usage extension. A remote attacker with control of a subordinate certificate can exploit this flaw by presenting a certificate...

CVE-2026-118667

A flaw was found in LangGraph. Helper functions responsible for streaming operations fail to properly sanitize caller-controlled identifiers before inserting them into authenticated request paths. An attacker can supply path traversal sequences within these identifiers to redirect requests to...

CVE-2023-28252-

CVE-2023-28252- CVE-2023-28252 exploit detection Monitoring of file creation in the directory where the exploit leaves files used for exploitation, at a hardcoded path in the folder "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" and "C:\Users\Public\p"...

CVE-2026-115353

A flaw was found in mistune. This flaw allows a remote attacker to read arbitrary files and access sensitive system data through a path traversal vulnerability in the reStructuredText RST include directive. By submitting crafted markup referencing absolute file paths or directory traversal...

CVE-2026-118572

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass. This issue affects OAuth Login - OAuth OIDC SSO versions: from 0.0.0 to 3.1.1...

CVE-2026-118561

External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19...

CVE-2026-118554

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1...

CVE-2026-107261

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...

CVE-2026-107254

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus 2FA allows Authentication Bypass. This issue affects Authenticator Login Plus 2FA versions: from 0.0.0 to 1.0.1...