46 matches found
CVE-2025-49144
PoC de Plantage Binaire de Notepad++ CVE-2025-49144 ⚠️ À SEULEMENT DES FINS ÉDUCATIVES Ce code est conçu à des fins éducatives et de recherche pour comprendre les vulnérabilités de plantage binaire. À utiliser uniquement dans des environnements contrôlés avec une autorisation appropriée. 📋 Aperçu...
N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...
CVE-2023-38831-PoC
CVE-2023-38831 PoC Этот репозиторий — просто доказательство концепции для CVE-2023-38831 Zero-Day уязвимости в WinRAR RARLabs WinRAR версии до 6.23 позволяет злоумышленникам выполнять произвольный код, когда пользователь пытается просмотреть безвредный файл в ZIP-архиве. Проблема возникает, потом...
BIT-ENVOY-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
PT-2026-102729
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
wp2shell
wp2shell — Удалённое выполнение кода RCE в ядре WordPress без аутентификации CVE-2026-63030 Путаница с пакетным маршрутом, CVSS 7.5 + CVE-2026-60137 SQL-инъекция, CVSS 9.1 Цепочка удалённого выполнения кода RCE в ядре WordPress без аутентификации, не требующая плагинов, особой конфигурации и...
CVE-2025-4517-POC
CVE-2025-4517 Exploit NOTES Cet exploit et la description sont rédigés par IA. Si vous trouvez une erreur ou un problème, merci de me le faire savoir ! Cet exploit a été testé et confirmé fonctionnel. Merci ! Aperçu Cet exploit exploite CVE-2025-4517 , une vulnérabilité critique dans le module...
winrar_CVE-2023-38831_lazy_poc
winrarCVE-2023-38831lazypoc Manière paresseuse de créer un fichier WinRAR CVE-2023-38831 pour les tests Article qui mentionnait cette vulnérabilité et l'échantillon : https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ La version de WinRAR que j'utilisais est WinRAR 5.91.0 J'ai pris un...
CVE-2024-27198-SOC-Lab
CVE-2024-27198 — Лаборатория обнаружения и реагирования на инциденты SOC Обход аутентификации в JetBrains TeamCity | Оценка CVSS: 9.8 Критический Этот проект создает полную среду лаборатории SOC для моделирования, обнаружения и реагирования на CVE-2024-27198 — уязвимость обхода аутентификации в...
CVE-2025-0108
CVE-2025-0108 — Веб-безопасность PoC & Исправление Этот репозиторий содержит небольшую лабораторную среду для воспроизведения и устранения проблемы CVE-2025-0108 путаница путей / контрабанда заголовков между Nginx и Apache. Цель задания — продемонстрировать, как дважды закодированные запросы могу...
SUSE CVE-2026-73551
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
CVE-2026-73551
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
CVE-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
EUVD-2026-84119
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
CVE-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
CVE-2026-73551 Envoy: Path normalization does not handle dot and dotdot segments with parameters
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
CVE-2026-73551
Envoy is an open-source edge and service proxy for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 , its URL normalization does not recognize dot and dotdot path segments carrying semicolon parameters . A request such as /user/..;foo=bar/admin is not canonicalized to /admi...
CVE-2026-73551: Use of Non-Canonical URL Paths for Authorization Decisions
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization does not recognize dot and dotdot path segments when they carry semicolon parameters. A request such as /user/..;foo=bar/admin is therefor...
CVE-2026-47215 Singularity: Incorrect path matching for 'limit container paths' directive
SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to...
CVE-2026-61800
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...