CVE-2026-75337

Yu AI Code Mother v4.3 is vulnerable to path traversal in its static resource interface /api/static/{deployKey}/. The user-controlled path is concatenated to the preview root directory without normalization, allowing anonymous attackers to read files outside the intended preview root. A PoC is av...

CVE-2026-37007

FileWriterTool in crewai-tools (versions

PT-2026-82768

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

CVE-2026-37066

CVE-2026-37066 affects Veno File Manager Project 4.4.9 , where a path traversal vulnerability in the endpoints /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php leads to arbitrary file read. An authenticated attacker with the super administrator role can disclose sensitive information by sen...

POC_CVE-2024-4322

CVE-2024-4322: LoLLMS WebUI PoC और Nuclei सत्यापन प्रयोगशाला यह रिपॉजिटरी CVE-2024-4322 को पुनरुत्पादित करने के लिए Dockerized स्थानीय प्रयोगशालाएं प्रदान करता है, जो LoLLMS WebUI v9.6 में एक पथ ट्रैवर्सल भेद्यता है, और यह सत्यापित करने के लिए कि संबद्ध Nuclei टेम्पलेट LoLLMS WebUI v9.8 से मेल नह...

CVE-2019-1010268

CVE-2019-1010268에 대한 PoC 익스플로잇 작성자: Tonyynot14 Kali Linux를 사용하여 테스트됨 영감을 얻은 출처: https://www.exploit-db.com/exploits/43113 사용법 root@kitploit: python3 exploit.py -l domainname -a apppath -r /etc/passwd...

Important: Red Hat Security Advisory: iscsi-initiator-utils security update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...

CVE-2021-38819

CVE-2021-38819...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Progetto di ricerca educativo. Tutti i test sono stati eseguiti in un laboratorio Docker isolato. Non utilizzare contro sistemi che non possiedi. Riepilogo della vulnerabilità...

HackTheBox-Facts

HTB Facts — Rédaction complète Difficulté : Medium OS : Linux Mots-clés : Web, MinIO, Camaleon CMS, Contournement de chemin, SSTI, Élévation de privilèges Table des matières 1. Reconnaissance 2. Énumération web — Port 80 3. Découverte de MinIO — Port 54321 4. Camaleon CMS — Accès administrateur 5...

CVE-2026-47862 ZipTransformer uses file_name header to build workDirectory path without sanitization

An attacker who can set the filename header on a message reaching a ZipTransformer with ZipResultType.FILE the default can cause the resulting .zip archive to be written to an arbitrary filesystem path outside the configured workDirectory. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5...

CVE-2026-47862

Spring Integration's ZipTransformer component is vulnerable to a path traversal issue when using the default ZipResultType.FILE result type. An attacker who can set the file_name message header on a message reaching the transformer can cause the resulting .zip archive to be written to an arbitrar...

zenml-CVE-2024-2083-POC

CVE-2024-2083 – PoC per lettura arbitraria di file in ZenML Questo repository dimostra come riprodurre CVE-2024-2083 , una vulnerabilità di lettura arbitraria di file in ZenML. Il problema consente a un attaccante di leggere file dal filesystem del server abusando del campo logs.uri nella richies...

FORTIWEB_CVE-2025-64446-58034

Simulazione di sfruttamento di FortiWeb CVE-2025-64446 e CVE-2025-58034 Nota: Questo documento ha solo scopo didattico e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica FortiWeb è un dispositivo Web Application Firewall WAF utilizzato per...

CVE-2021-43798

CVE-2021-43798 1. الملخص Grafana هي منصة مفتوحة المصدر تدعم مراقبة البيانات وإدارتها، وتوجد في الإصدارات التالية ثغرة اجتياز المسار Path Traversal التي تسمح بالتلاعب بمسارات الملفات باستخدام أحرف خاصة مثل ../. 8.0.0 وما فوق، وأقل من 8.0.7 8.1.0 وما فوق، وأقل من 8.1.8 8.2.0 وما فوق، وأقل من 8.2.7...

cve-2024-38819

CVE-2024-38819 01. Panoramica di File-Traversal e WebFlux 1 Panoramica di File-Traversal e WebFlux La vulnerabilità File-Traversal path traversal è un tipo di attacco, identificato come CWE-22, che consente a un attaccante di aggirare i permessi del file system in un'applicazione web e accedere a...

CVE-2023-50164-Apache-Struts-RCE

CVE-2023-50164: vulnerabilità di path traversal in Apache Struts che porta a RCE Una vulnerabilità di sicurezza critica, identificata come CVE-2023-50164 CVE: 9.8, è stata trovata in Apache Struts e consente agli aggressori di manipolare i parametri di upload dei file, il che può potenzialmente...

CVE-2026-36851

CVE-2026-36851 路径遍历/任意文件读取漏洞，存在于 UnPoller v2.33.0 中，通过 file:// 密码前缀触发。文件内容从磁盘读取并在认证期间传输到配置的 UniFi 控制器 URL。...

CVE-2025-47273-PoC

CVE-2025-47273: setuptools versione 78.1.0 - Path Traversal in setuptools.packageindex Dichiarazione di non responsabilità Questa Proof of Concept PoC è intesa esclusivamente a scopo educativo e per audit di sicurezza autorizzati. L'autore non si assume alcuna responsabilità per l'uso improprio d...