CVE-2025-68705

CVE-2025-68705 - RustFS パストラバーサルエクスプロイト 概要 このスクリプトは、RustFS のパストラバーサル（ディレクトリトラバーサル）脆弱性（CVE-2025-68705）を悪用し、サーバー上の任意のファイルを読み取ることを可能にします。 必要条件 Python 3.6+ 依存関係については requirements.txt を参照してください インストール root@kitploit: git clone https://github.com/yourusername/CVE-2025-68705.git cd CVE-2025-68705 pip...

CVE-2026-78312

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-77193

The eesyID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the id2wppath parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

EUVD-2026-85822

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-78312

A Path Traversal vulnerability exists in DIAEnergie affecting versions before 1.11.00.022 . The vulnerability allows for potential unauthorized access or manipulation of files due to improper path handling. The impact is rated as CRITICAL (CVSS 3.1: 9.1) with high consequences for integrity and a...

CVE-2026-78312 Path Traversal in DIAEnergie

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...

CVE-2026-77193 eesy_ID2WP – Publish InDesign HTML5 <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'id2wp_path' Query Parameter

The eesyID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the id2wppath parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

EUVD-2026-85815

The eesyID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the id2wppath parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

CVE-2026-77193

The eesy_ID2WP – Publish InDesign HTML5 WordPress plugin is vulnerable to Path Traversal in all versions up to and including 1.0.3 . The flaw exists within the id2wp_path query parameter, allowing unauthenticated attackers to perform an arbitrary file read . This can lead to the exposure of sensi...

WordPress eesy_ID2WP – Publish InDesign HTML5 plugin <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read vulnerability

Unauthenticated Path Traversal to Arbitrary File Read vulnerability discovered by sermsak in WordPress Plugin eesyID2WP – Publish InDesign HTML5 versions = 1.0.3...

CVE-2026-82077

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

gin-vulnerable

gin-vulnerable github.com/gin-gonic/gin v1.7.0 に固定されたデモコンシューマ（CVE-2023-29401 に対して脆弱）。/download/:filename ハンドラはユーザ入力を直接 Context.FileAttachment に渡します — これは Endor が悪用可能としてフラグを立てるエクスプロイト条件パターンです。...

apache-web-log-analysis-lab

Apache Web Log Analysis Lab Blue Team lab focused on analyzing Apache HTTP server logs to detect web scanning activity, directory enumeration, and path traversal attempts. Objective Install and expose an Apache web server in an isolated lab environment, simulate automated web scanning using...

CVE-2026-82077 PaperCut NG/MF: Remote Code Execution via Scan2Fax

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

EUVD-2026-85811

An improper limitation of a pathname to a restricted directory path traversal vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings...

CVE-2026-82077

A path traversal vulnerability exists in the Scan-to-Fax component of PaperCut NG and PaperCut MF . An authenticated administrator can exploit this flaw by providing crafted fax provider settings to achieve arbitrary command execution on the underlying host. The vulnerability is associated with a...

CVE-2026-67224

A flaw was found in RabbitMQ, a messaging and streaming broker. A user with administrator privileges could exploit a path traversal vulnerability in the tracing plugin. By manipulating the name parameter, an attacker could write a .log-suffixed file to arbitrary filesystem paths writable by the...

CVE-2018-13379

CVE-2018-13379 - FortiGate SSL-VPN パストラバーサル PoC 説明 CVE-2018-13379のProof-of-Conceptスクリプトです。これは、Fortinet FortiGate SSL VPN Webポータルにおける重大なパストラバーサル脆弱性です。この脆弱性により、認証されていない攻撃者が特別に細工したHTTPリソースリクエストを介してシステムファイルをダウンロードでき、機密情報を含むセッションファイルが露出する可能性があります。 脆弱性の詳細 CVE ID : CVE-2018-13379 CVSSスコア : 9.8 重大...

duplicate-CVE-2025-4720-

cve-srms-drop-student-path-traversal CVE-2025-4720（重複） SourceCodester SRMS 1.0 における任意のファイル削除 説明 SourceCodester Student Result Management System（SRMS）1.0 の dropstudent.php エンドポイントにパストラバーサルの脆弱性が存在します。 このアプリケーションは、img GET パラメータからユーザーが制御する入力を受け取り、検証なしにそのまま unlink 関数へ渡すため、サーバー上の任意のファイルを削除できます。 脆弱なコード...

tar security, bug fix, and enhancement update

An update is available for tar. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNU tar program can save multiple files in an archive and restore files from ...