Grafana-CVE-2021-43798Exp

Grafana V8. Exp de Leitura Arbitrária de Arquivos -- Script de Verificação em Lote Multithread Descrição da Vulnerabilidade Grafana é um conjunto de ferramentas de código aberto para análise e visualização de métricas. É frequentemente usado como visualização de séries temporais de infraestrutura...

CVE-2026-81743

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

CVE-2024-4956

CVE-2024-4956 - اجتياز المسار غير المصادق عليه في Nexus Repository Manager 3 مدير مستودع Nexus هو مدير مستودع ينظم ويخزن ويوزع القطع الأثرية اللازمة للتطوير. تم اكتشاف ثغرة اجتياز المسار في Nexus Repository 3، في الإصدارات السابقة لـ 3.68.1. تسمح هذه الثغرة للمهاجم بصياغة عنوان URL لتنزيل ملفات...

CVE-2026-40526

Volmarg Personal Management System contains a path traversal vulnerability in the GET /public/get-file/{path} endpoint. The path parameter is passed directly to file_get_contents() without canonicalization against a permitted base directory, allowing an authenticated attacker to read arbitrary fi...

EUVD-2026-67124

Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...

CVE-2026-76844

A flaw was found in webpack-dev-middleware. A remote attacker can exploit a path traversal vulnerability when the configured publicPath lacks a trailing slash. By sending a specially crafted request, the attacker can bypass a security guard, allowing the middleware to resolve files from one...

Fast-Google-Dorks-Scan

فحص سريع لـ Google Dorks مشروع OSINT، الفكرة الرئيسية منه هي جمع جميع تركيبات بحث Google dorks الممكنة والعثور على المعلومات حول موقع الويب المحدد: لوحات الإدارة الشائعة، أنواع الملفات المنتشرة وتجاوز المسار. أتمتة بنسبة 100%. مثال الاستخدام: root@kitploit: chmod +x FGDS.sh ./FGDS.sh hydrattack.c...

CVE-2022-45988

CVE-2022-45988 StarSoftComm HP CooCare Existe uma vulnerabilidade de elevação de privilégio Eu entrei em contato com hp-security-alert. Eles corrigiram este bug. Sobre StarSoftComm CooCare HP-PSRT-IR 4106 O fornecedor respondeu com as seguintes informações: Siga estes passos para atualizar: 1...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon para Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivos Não Autenticado Descrição O plugin PDF Generator Addon para Elementor Page Builder do WordPress é vulnerável a Path Traversal em todas as versões até, e incluindo, 1.7.5 através da função...

CVE-2026-49114

A flaw was found in ONNX. The saveexternaldata function is vulnerable to symlink following and path traversal. A local attacker with write access to a directory where a victim serializes external data can exploit this by pre-planting a symlink. This allows the attacker to cause the victim's write...

CVE-2024-8190-unauth

CVE-2024-8190 não autenticado Descrição Combinando CVE-2024-8963 & CVE-2024-8190 - PoC para RCE não autenticado no Ivanti CSA 4.6 e anteriores. CVE-2024-8963 Path Traversal no Ivanti CSA anterior ao Patch 519 da versão 4.6 permite que um atacante remoto não autenticado acesse funcionalidades...

htb-labs-nexus

🏴‍☠️ HTB Labs - Nexus English 🇺🇸 | Español 🇪🇸 English | Español 📋 Vue d'ensemble Nexus est une machine Linux de difficulté Facile de Hack The Box qui illustre une chaîne d'attaque en plusieurs étapes impliquant l'énumération d'hôtes virtuels, des identifiants exposés, une fonctionnalité...

winrar-exploit

विवरण यह CVE-2025-8088 Winrar एक्सप्लॉइट का मेरा कार्यान्वयन है। यह आर्काइव के भीतर ऑल्टरनेट डेटा स्ट्रीम ADS और पाथ पैचिंग का उपयोग करता है। जब पीड़ित संक्रमित आर्काइव को निकालता है, तो पैच किया गया ADS पेलोड जैसे, एक्ज़ीक्यूटेबल, पॉवरशेल स्क्रिप्ट, या कोई मज़ेदार png लक्ष्य पथ आमतौर पर स्टार्टअ...

CVE-2026-21962

CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Plug-in تجاوز التحكم في الوصول عبر عدم اتساق تطبيع URI استغلال وتحليل مُعاد إنتاجه بشكل مستقل لـ CVE-2026-21962 التحكم غير السليم في الوصول، CVSS 10.0 في Oracle HTTP Server / المكوّن الإضافي لوكيل Oracle WebLogic Server لخادم Apache HTTP...

CVE-2026-71492

A flaw was found in Banks. The DirectoryPromptRegistry.set function improperly handles attacker-controlled Prompt.name and Prompt.version values. This allows for path traversal, enabling an attacker to write arbitrary files outside the intended registry root. This vulnerability could lead to...

CVE-2022-29806

CVE-2022-29806 ZoneMinder até 1.36.12 Escalação de privilégio de idioma e RCE Descrição Uma vulnerabilidade de Path Traversal no arquivo de log de depuração e na opção de idioma padrão no ZoneMinder versão anterior a 1.36.13 e 1.37.11 permite que invasores escrevam e executem código arbitrário pa...

CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

EUVD-2026-67007

Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...

CVE-2026-81743

Flowintel versions >=3.3.0 allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this value, an attacker with high privileges can set LOG_...

CVE-2026-46345

A flaw was found in compliance-trestle. The trestle author jinja command, when processing the -o/--output argument, is vulnerable to path traversal. This allows a local attacker to write files to arbitrary locations outside the intended workspace by providing specially crafted path sequences or...