CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE

CVE-2021-41773 – Ejecución remota de código en Apache HTTP Server 2.4.49 ⚠️ Aviso legal Este repositorio está destinado exclusivamente a fines educativos y de investigación. La información y el código proporcionados aquí pueden utilizarse en entornos controlados , como máquinas de laboratorio...

CVE-2026-85706_docker_exp

1. Descargar docker root@kitploit: git clone https://github.com/FlowerWitch/CVE-2026-85706dockerexp docker compose up -d 2. Escribir la información de prueba LFI root@kitploit: docker exec gitlab-vuln bash -c 'echo "SECRET-CANARY-85706-%%%" /tmp/canary.txt' 3. Leer y verificar root@kitploit:...

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

CVE-2026-66492

Path Traversal en el destino de carga de archivos PhocaCommander ≤ 6.1.3 — Administrador autenticado escribe archivos fuera de la raíz web RESUMEN El controlador de carga de archivos en PhocaCommander construye la ruta de destino a partir de un parámetro folder codificado en base64 y controlado p...

CVE-2023-50164-Apache-Struts-RCE

CVE-2023-50164: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code...

CVE-2019-17662

CVE-2019-17662 Modified the CVE code Used Prepared Requests, as in python3 requests module normalize the ../ in URL such as: For code: root@kitploit: r = requests.get"http://123.123.123.123/../../../../../../test" printstrr.statuscode Results in: root@kitploit: GET /test HTTP/1.1 Host:...

CVE-2026-84882

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system...

CVE-2019-5418

CVE-2019-5418 1. Vulnerability Description Ruby on Rails is a web application framework, a relatively newer web application framework built on the Ruby language. This vulnerability is mainly caused by Ruby on Rails using the render file method with a specified parameter to render views outside th...

CVE-2006-3392

CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequence...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 Unauthenticated Path Traversal...

cpanel2shell-scanner

cpanel2shell-scanner Un escáner de alta fidelidad para la omisión de autenticación de cPanel/WHM rastreada como CVE-2026-41940. Identifica hosts vulnerables sin producir los falsos negativos comunes en las pruebas de concepto y detecciones públicas, y sin activar el bloqueo de cuenta ni los...

CVE-2018-0296

Exploit-CVE-2018-0296 Python exploit for the recent Cisco ASA Path Traversal Vulnerability. This exploit will try to return the files from the index. Usage root@kitploit: $ git clone https://github.com/bhenner1/CVE-2018-0296.git $ cd CVE-2018-0296 $ python CVE-2018-0296.py $ Vulnerable URL/IP -...

CVE-2026-93643

When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra...

CVE-2021-43798

CVE-2021-43798 Grafana-Arbitrary-File-Read 8.0.0 8.3.0 A vulnerability in Grafana CVE-2021-43798 versions 8.0.0 8.3.0 that allows an unauthenticated attacker to read arbitrary files from the server by leveraging a path traversal aimed towards the /public/plugins/ path to access sensitive files on...

CVE-2024-34313

CVE-2024-34313 Descripción VPL Jail System hasta v4.0.2 se descubrió que contiene una vulnerabilidad de Path Traversal que permite la sobrescritura arbitraria de archivos y, por lo tanto, la escalada de privilegios al usuario root. Esta vulnerabilidad puede encadenarse con CVE-2024-34312 para tom...

CVE-2026-84882

IBM Guardium Data Protection 12.2 is vulnerable to a path traversal vulnerability in the Universal Connector Oracle Wallet upload component (CWE-22). An authenticated remote attacker could exploit this flaw to write arbitrary files to the system. IBM encourages customers to update their systems p...

EUVD-2026-87105

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system...

CVE-2026-84882 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system...

CVE-2026-93643

The Zimbra Collaboration Suite is vulnerable to a critical security flaw when OnlyOffice/Document Editing is enabled. An unauthenticated remote attacker with access to a supported public Briefcase document can exploit unsigned save fields to perform path-traversal writes . This vulnerability can ...

CVE-2026-93643 Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request

When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra...