CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all...

CVE-2026-118756

The gopass password manager (versions before 1.17.0 ) contains a path traversal vulnerability in its filesystem storage backend. The flaw is triggered via ../ entry names within the Prune and IsDir functions. A collaborator with write access to a shared git-synced store can introduce crafted entr...

CVE-2026-118693

Versions of CherryTree up to and including 1.7.2 are vulnerable to a path traversal vulnerability within the CtStorageXmlHelper::_create_image_from_xml function. The root cause is the application's trust in unvalidated filename attributes within embedded-file tags in XML documents. An attacker ca...

EUVD-2026-109981

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies Zip Cloaking Leading to Arbitrary File Overwrite & RCE...

unKover

unKover Uncover what's forbidden. 403 bypass tester by Brute Logic. Part of the King of Noobs suite — offensive recon tools built on KISS and the Pareto principle. Simple, fast, and effective. What It Does unKover tests a URL returning 403 Forbidden or 401 Unauthorized against a set of proven...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 Scanner Scans Kestra instances for the endsWith"/configs" authentication filter bypass. Kestra's AuthenticationFilter.java checks request.getPath.endsWith"/configs" instead of matching the exact path /api/v1/configs. Since Kestra addresses resources via...

CVE-2026-39813

🛡️ CVE-2026-39813 - Fortinet FortiSandbox Path Traversal Vulnerability 📌 Overview CVE-2026-39813 is a critical path traversal vulnerability affecting Fortinet FortiSandbox. The vulnerability arises due to improper validation of user-supplied file paths, allowing attackers to manipulate directory...

GHSA-3FX2-CQW9-XR3C LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied threadid and assistantid values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another path on...

LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied threadid and assistantid values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another path on...

Vulnerability-CVE-2025-64446-CVE-2025-58034

FortiWeb Exploitation Simulation CVE-2025-64446 & CVE-2025-58034 Note: This document is for educational and security research purposes only. Do not use to attack systems without permission. 1. Overview FortiWeb is a Web Application Firewall WAF device used to protect web applications. In 2025, tw...

GHSA-3PMX-CF9F-34XR Echo static file middleware route protection bypass via encoded dot-dot traversal

Summary Echo v5.2.0 contains a bypass of the fix for GHSA-vfp3-v2gw-7wfq. The fix rejects encoded path separators such as %2F and %5C before static file path unescaping, but two traversal forms still bypass route-level middleware protections for static files. The primary bypass uses encoded dot-d...

Echo has a Static Middleware Double-Unescape Path Traversal

Summary Commit a9ede66a PR 3006, issue 2599 silently fixed a path traversal vulnerability in the Echo web framework's static file middleware. Vulnerability The static middleware double-unescaped URL paths. Go's net/http already decodes Request.URL.Path, but middleware/static.go unconditionally...

GHSA-XWQ5-6CQP-VX96 Echo has a Static Middleware Double-Unescape Path Traversal

Summary Commit a9ede66a PR 3006, issue 2599 silently fixed a path traversal vulnerability in the Echo web framework's static file middleware. Vulnerability The static middleware double-unescaped URL paths. Go's net/http already decodes Request.URL.Path, but middleware/static.go unconditionally...

CVE-2025-29927-NextJS

📦 Next.js CVE-2025-29927 - Proof of Concept This repository contains a minimal Proof of Concept PoC for exploiting CVE-2025-29927, a high-severity vulnerability affecting specific versions of Next.js that allows unauthorized access to internal application files through crafted URLs. ⚠️ Disclaimer...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...

CVE-2023-32315

CVE-2023-32315 Openfire's administrative console the Admin Console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup Environmentin an already configured Openfi...

CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 Test Script This project provides a simple Bash script for testing whether an Oracle WebLogic server is vulnerable to the authentication bypass CVE-2020-14882 and the associated remote code execution vector CVE-2020-14883. The script sends a POST request t...

CVE-2018-11776

Vulnerable docker container for CVE-2018-11776 docker pull bhdresh/cve-2018-11776:1.0 docker run -dit -p :8080:8080 bhdresh/cve-2018-11776:1.0 PoC PoC - 1 Request : http://:8080/struts2-showcase-2.3.14/$333+333/help.action Result : http://:8080/struts2-showcase-2.3.14/666/help.action PoC - 2...

CVE-2025-62878

CVE-2025-62878: Local Path Provisioner Path Traversal Overview Item| Value ---|--- CVE ID| CVE-2025-62878 GHSA ID| GHSA-jr3w-9vfr-c746 Severity| Critical CVSS 10.0 CWE| CWE-23 Relative Path Traversal Affected Component| rancher/local-path-provisioner Affected Versions| v0.0.27 v0.0.32 Fixed...

FUXAPWN

CVE-2026-25895 — FUXA = 1.2.9 Unauthenticated Path Traversal to Remote Code Execution Unauthenticated, pre-auth arbitrary file write against FUXA, a Node.js-based SCADA/HMI platform. Chains to remote code execution via several distinct post-write primitives. Works even when secureEnabled = true...