CVE-2026-96275

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

EUVD-2026-85342

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

CVE-2026-96275

The Flatpak package manager is vulnerable to an arbitrary write access as root. A malicious or compromised Flatpak repository can use the extract_extra_data() function to write attacker-controlled content to arbitrary locations on the host filesystem. The root cause stems from two combined issues...

CVE-2026-96275

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

Path-Traversal-CVE-2024-4956

このリポジトリには README がありません。...

CVE-2021-41773

Apache HTTP Server 2.4.49 - パストラバーサル & RCE CVE-2021-41773 CVE-2021-41773 を対象とした、洗練された Python ベースの概念実証 PoC エクスプロイトです。このツールは、Apache 2.4.49 サーバーにおけるパストラバーサルおよびリモートコード実行 RCE の脆弱性をテストするプロセスを自動化します。 ⚠️ 法的免責事項 このツールは教育目的のみ...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 취약한 실습 환경 이 저장소는 CVE-2025-7775에 대한 nuclei 템플릿을 테스트하기 위한 취약한 환경을 제공합니다. 실행 root@kitploit: docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app 취약점 테스트 1. 원격 명령 실행 RCE root@kitploit: curl -X POST http://localhost:5000/api/v1/configuration \ -H "Content-Type:...

vulnerabilities in Adobe Connect and the Adobe Connect Android Mobile App

Adobe has identified 9 vulnerabilities in Adobe Connect and the Adobe Connect Android Mobile App. These vulnerabilities are present in Adobe Connect 12.12 and Adobe Connect Android Mobile App 4.5. The vulnerabilities concern various security issues in Adobe Connect, including SQL injection,...

CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

CVE-2021-31800 - Impacket SMB Server 任意ファイル読み取り/書き込み CVSSベクトル : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSSスコア : 9.9 緊急 説明 smbserver.pyのパストラバーサルにより、攻撃者がサーバー上の任意のファイルを読み取り/書き込みできるようになります。 この問題の詳細な説明: https://checkmarx.com/blog/cve-2021-31800-how-we-used-impacket-to-hack-itself/ 使用方法 make を...

CVE-2026-54520

CVE-2026-54520 ai-agent-automation ワークフローファイルのステップにおけるパストラバーサルにより、予期されるディレクトリの外部での読み取り/書き込みが可能になりました。 一次勧告: GHSA-cm8g-8jfq-887p 研究者クレジット: @chaitanyagarware 概要...

CVE-2026-15358

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-35204

CVE-2026-35204 このリポジトリはCVE-2026-35204のPoCです。 Description 「HelmはKubernetes用のチャートのパッケージマネージャです。4.0.0から4.1.3の間で、特別に細工されたHelmプラグインをインストールまたは更新すると、プラグインの内容が任意のファイルシステムの場所に書き込まれます。これを防ぐには、Helmプラグインのplugin.yamlのversion:フィールドにPOSIXドットドットパス区切り文字（すなわち"/../"）が含まれていないことを確認してください。この脆弱性は4.1.4で修正されています。」...

cve-2026-87902-wordpress-lfi-lab

CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress getpagetemplate 未認証LFI → 条件付きRCE 再現ラボ + URLリストスキャナ + PoC。Dockerラボ上の正規のWordPress 7.1.1（脆弱） および 7.1.2（修正済み） に対して構築し、エンドツーエンドで検証済み 。 アドバイザリ: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp 種別: CWE-98...

CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal

🚨 CVE-2026-87902：WordPress 核心未认证路径遍历与 RCE 缓解措施 🔴 观看完整分析与缓解教程： 👉 点击此处前往 YouTube 观看 📖 概述 本仓库提供了我们在对 CVE-2026-87902 （CVSS 9.2 严重）进行技术分析时所涉及的应急参考笔记、Web 服务器缓解规则以及加固配置。 CVE-2026-87902 影响 WordPress Core 4.7.0 至 7.1.1 版本。它允许未认证的远程攻击者通过主题模板解析函数（locatetemplate / getpagetemplate）执行路径遍历和本地文件包含（LFI），并可结合...

CVE-2026-53940

A flaw was found in Conda, a system-level binary package and environment manager. An unvalidated entry-point command in a noarch:python package's metadata allows a malicious package to use path traversal. This enables writing files outside the intended installation directory or overwriting existi...

EUVD-2026-85237

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-15358 Path Traversal Vulnerability

ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671 were vulnerable to an unauthorized Path Traversal vulnerability...

CVE-2026-93987

A flaw was found in rclone. The rclone serve docker volume plugin contains a path traversal vulnerability. A highly privileged attacker, by submitting a crafted Docker VolumeDriver.Create request with a malicious volume name, can cause the rclone plugin process to create a directory and mount a...

CVE-2026-93986

A flaw was found in rclone. This path traversal vulnerability allows a remote attacker to craft special names in server and third-party listing responses. These crafted names, containing directory traversal sequences, could potentially enable writing outside the intended destination directory...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561)

Summary Multiple vulnerabilities including path traversal and Denial of Service in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerabili...