Linux Distros Unpatched Vulnerability : CVE-2026-67224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as...

CVE-2026-96678

A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java of the component Avatar Upload. The manipulation of the argument...

CVE-2026-96678

A path traversal vulnerability exists in the Avatar Upload component of weiqingwen spring-boot-forum (affected up to commit 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f). The flaw is located in the validate function within the file src/main/java/com/qingwenwei/util/NewUserFormValidator.java, where ma...

CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2025-29927-NextJS

📦 Next.js CVE-2025-29927 - 概念実証 このリポジトリは、特定のバージョンのNext.jsに影響を与える高深刻度の脆弱性 CVE-2025-29927 を悪用するための最小限の概念実証 PoC を含んでいます。この脆弱性により、細工されたURLを通じて内部アプリケーションファイルへの不正アクセスが可能になります。 ⚠️ 免責事項 このコードは教育目的および許可されたセキュリティ研究 のみを目的としています。所有していない、または明示的なテスト許可を得ていないシステムでは使用しないでください。 🚀 はじめに 🔧 前提条件 Docker Git Python3.8+...

cve-2021-41773-exploration

概要 CVE-2021-41773 は、2021年10月に Apache HTTP Server 2.4.49 で発見されたパストラバーサルの脆弱性です。根本原因は、要求されたパスが Web ルート内に収まっているかを確認する前に、URL 内のドットシーケンスを適切に正規化できなかったことにあります。この脆弱性により、攻撃者は Web ルートを抜け出してサーバのファイルシステム上の任意のファイルにアクセスすることが可能となり、一部のケースではリモートコード実行にまでエスカレーションする可能性がありました。 この検証で実証する2つの攻撃ベクトル パストラバーサル:...

CVE-2026-75887

A path traversal vulnerability exists in the OpenShift console within the i18n locale handler . An unauthenticated attacker can manipulate the lng and ns query parameters in the /locales/resource.json endpoint to read sensitive *.json files from the pod filesystem, such as configuration files and...

CVE-2026-75887 Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-75887

A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the lng and ns query parameters in the /locales/resource.json endpoint. This allows the attacker to read sensitive .json files from the pod filesystem, including plugi...

CVE-2026-67224

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

DEBIAN-CVE-2026-67224

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

CVE-2026-67224 RabbitMQ: Admin path-traversal write via trace name

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

CVE-2026-67224

RabbitMQ (prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1 ) is vulnerable to a path-traversal write flaw in the tracing plugin . The issue exists because the trace consumer fails to apply a safe_relative_path check on the write side when constructing output paths from the PUT /api/tra...

CVE-2026-67224

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

CVE-2026-67224 RabbitMQ: Admin path-traversal write via trace name

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

CVE-2026-71462

StringListPathField.tointernalvalue calls os.path.exists on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute paths on the controller-web pod. Tenant superuser can confirm /etc/tower/SECRETKEY, k8s service-account token, receptor sockets, ConfigMap mount...

Exploit for Path Traversal in Apache Http_Server

Apache CVE-2021-41773 Security Lab A controlled cybersecurity...

EUVD-2026-66421

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

CVE-2021-27905.POC

CVE-2021-27905.POC CVE-2021-27905に関連するLFIのPOC apache-solr-file-read nuclei templateのPOC 使用方法 traverse.sh path 例えば、パスとして/rootを使用すると、すべてのファイルの内容を（再帰的に）表示します。 ./traverse.sh /root また、サーバー上のすべてのファイル（もちろん読み取り権限があるもの）をトラバースして内容を取得することも可能です。 ./traverse.sh / ドキュメント 脆弱なSolrインスタンスからのレスポンスはstatus...

CVE-2026-72903

A flaw was found in Tabby, a terminal emulator. A remote attacker, operating a malicious SFTP server, could exploit a path traversal vulnerability. This occurs when the server returns a specially crafted filename containing backslashes, which are then misinterpreted by Tabby's Windows-native path...