CVE-2026-54550

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

EUVD-2026-66562

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

CVE-2026-73102 RustDesk Path Traversal via macOS Clipboard File-Paste

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

CVE-2026-73102

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths, allowing a remote peer...

EUVD-2026-66421

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

CVE-2021-41773

CVE-2021-41773 Vulnerabilità di Path Traversal in Apache 2.4.49 Questo problema interessa solo Apache 2.4.49 e non le versioni precedenti. ULTERIORI INFORMAZIONI https://pentesterguruji-notes.notion.site/CVE-2021-41733-f58b52f484b94671b319c107ac2739bf...

CodePath_Week_7-8

CodePath Settimana 7-8 CodePath Assegnazione per le Settimane 7 e 8: CVE-2017-14718, CVE-2019-9787 e Modifica non autenticata del contenuto di Pagine/Post tramite API REST Progetto 7 - WordPress Pentesting Tempo impiegato: 16 ore in totale Obiettivo: Trovare, analizzare, ricreare e documentare...

CVE-2020-3452-Cisco-Scanner

CVE-2020-3452 - Scanner Cisco ASA Scansione per CVE-2020-3452 - Path Traversal non autenticato che colpisce i firewall Cisco ASA che eseguono anyconnect https://vulners.com/cve/CVE-2020-3452 Documenti di supporto:...

CVE-2023-2825

CVE-2023-2825 - Lettura Arbitraria di File tramite Path Traversal in GitLab CE/EE 16.0.0 Il 23 maggio 2023 GitLab ha rilasciato la versione 16.0.1 che ha risolto una vulnerabilità critica, CVE-2023-2825, che affliggeva le versioni Community Edition CE ed Enterprise Edition EE 16.0.0. La...

Vitejs-exploit

Vite Exploit CVE-2025-31125 Beschreibung: Nutzt den Path-Traversal-Schwachstelle im @fs-Endpunkt des Vite Development Servers CVE-2025-31125 aus, um über manipulierte URLs auf sensible Dateien wie /etc/passwd und /etc/hosts zuzugreifen. Erstellt von Muhammad Waseem. Verwendung: python...

CVE-2026-5027

Questo post è un articolo di ricerca pubblicato da EQSTLab. Grazie aYahia Hamza, che ha segnalato e analizzato questa vulnerabilità. CVE-2026-5027 ★ CVE-2026-5027 PoC di Path Traversal / Scrittura Arbitraria di File in Langflow ★ Descrizione CVE-2026-5027 : Vulnerabilità di Scrittura Arbitraria d...

CVE-2025-24813

CVE-2025-24813 - Vulnerabilità di Path Equivalence in Apache Tomcat Apache Tomcat è vulnerabile a un problema di Path Equivalence / Path Traversal dovuto alla gestione impropria delle sequenze ../ nei percorsi. ID CVE: CVE-2025-24813 Gravità: Critica Link di riferimento:...

CVE-2024-36991

CVE-2024-36991 Path Traversal sull'endpoint “/Modules/Messaging/” in Splunk Enterprise su Windows Nelle versioni di Splunk Enterprise precedenti a 9.2.2, 9.1.5 e 9.0.10, un attaccante potrebbe eseguire un path traversal sull'endpoint /modules/messaging/ in Splunk Enterprise su Windows. La...

CVE-2022-21371

CVE-2022-21371 Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Lokale Dateieinbindung root@kitploit: Exploit Title: Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion Date: 25/1/2022 Exploit Author: Jonah Tan @picar0jsu Vendor...

CVE-2024-34470

HSC MailInspector - CVE-2024-34470 Es wurde eine kritische Sicherheitslücke in HSC Mailinspector bis Version 5.2.18 gefunden. Diese Schwachstelle betrifft eine unbekannte Funktionalität der Datei /public/loader.php. Durch Manipulation des Arguments 'path' mit einer unbekannten Eingabe kommt es zu...

CVE-2026-18080

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin (versions ≤ 1.17.8) is vulnerable to an unauthenticated arbitrary file upload via the CRM Email Connect IMAP attachment processing. The root cause is missing file extension validation and path normalization in the...

EUVD-2026-66408

The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 1.17.8 via the saveattachments function. This is due to missing file extension validation and missing path normalization whe...

CVE-2025-24813-POC

JSP Web Shell Uploader Ein einfaches Python-Tool zum Hochladen einer grundlegenden JSP-Web-Shell auf ein oder mehrere Ziele über HTTP-PUT-Anfragen. ⚠️ Nur für Bildungszwecke und autorisierte Penetrationstests. Apache Tomcat ist anfällig für ein Path Equivalence / Path Traversal-Problem aufgrund...

CVE-2026-16444

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

CVE-2023-47464

GL-AX1800 Router Security Assessment Report Overview This report outlines the findings of a comprehensive security assessment conducted on the GL-AX1800 router manufactured by GL.iNet. The assessment aimed to identify potential vulnerabilities and weaknesses in the device's security measures...