CVE-2018-13379

🛡️ CVE-2018-13379 - Vulnerabilità Fortinet SSL VPN 🔍 Panoramica CVE-2018-13379 è una vulnerabilità critica di path traversal in Fortinet FortiOS SSL VPN. Consente agli attaccanti di scaricare file di sessione web VPN ed estrarre informazioni sensibili. Impatto: Divulgazione di informazioni nomi...

CVE-2018-13379

CVE-2018-13379 – FortiGate SSL-VPN Path-Traversal PoC Beschreibung Proof-of-Concept-Skript für CVE-2018-13379, eine kritische Path-Traversal-Schwachstelle im Fortinet FortiGate SSL VPN Webportal. Diese Schwachstelle ermöglicht es nicht authentifizierten Angreifern, über speziell präparierte...

CVE-2023-50164Analysis-

CVE-2023-50164: Verwundbare Apache Struts Anwendung Eine kritische Sicherheitslücke, identifiziert als CVE-2023-50164 CVE: 9.8, wurde in Apache Struts gefunden. Sie ermöglicht Angreifern, Datei-Upload-Parameter zu manipulieren, was potenziell zu unbefugtem Pfad-Traversal und Remote-Code-Ausführun...

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application يحتوي هذا المستودع على ماسح ضوئي PoC مبني بلغة Go لثغرة CVE-2026-22557 التي تستهدف تطبيق UniFi Network. تقوم الأداة بإجراء فحص محكوم وغير مدمر لمجموعة من نقاط النهاية الشائعة وحمولات اجتياز المسار لتحديد السلوكيات التي قد تكون عرضة...

CVE-2021-3019

Lanproxy निर्देशिका ट्रैवर्सल भेद्यता CVE-2021-3019 भेद्यता विवरण Lanproxy एक इंट्रानेट पेनेट्रेशन टूल है जो LAN पर्सनल कंप्यूटर और सर्वर को पब्लिक नेटवर्क पर प्रॉक्सी करता है। यह TCP ट्रैफ़िक फ़ॉरवर्डिंग का समर्थन करता है और किसी भी TCP अपर-लेयर प्रोटोकॉल इंट्रानेट वेबसाइट तक पहुँच, स्थानीय भुगत...

EUVD-2026-66281

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

dotdotslash

dotdotslash Uno strumento per aiutarti a cercare vulnerabilità di Directory Traversal Benchmark Piattaforme che ho testato per validare l'efficienza dello strumento: DVWA low/medium/high bWAPP low/medium/high Screenshot Installazione Puoi scaricare l'ultima versione clonando questo repository...

CVE-2026-57171

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the catalog-generate, profile-generate, and ssp-generate author commands write generated Markdown to an attacker-influenced output...

VMware vRealize Log Insight - Path Traversal

he vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. id: CVE-2022-31706 info: name: VMware vRealize Log Insight - Path Traversal...

Qlik Sense Enterprise - Path Traversal

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

ConnectWise ScreenConnect <= 23.9.7 - Path Traversal

ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...

GitLab 16.0.0 - Path Traversal

An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups id: CVE-2023-2825 info: name:...

WordPress File Upload <= 4.24.11 - Arbitrary File Read

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitatio...

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

CVE-H3C-Report

H3C GR-Serie Router Systemverwaltung weist Schwachstelle für unbefugten Zugriff auf Produkt : GR-Serie Router Version : alle Bewertung : hohes Risiko Webseite : http://www.h3c.com/ Gefahren : Angreifer können diese Schwachstelle ausnutzen, um sensible Informationen von Routern zu erlangen, indem...

PT-2026-82044

Name of the Vulnerable Software and Affected Versions TeamViewer Desktop Clients versions prior to 15.81.5 Description Improper neutralization of path traversal sequences allows an authenticated remote session participant to write files to unintended locations on the local file system. This occur...

Linux Distros Unpatched Vulnerability : CVE-2026-79676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root- derived paths using built-in open instead of...

CVE-2026-75333

yx-image-recognition v1.0 contains a Path Traversal vulnerability where parameters such as dir and filePath are passed directly to new File() for file system operations without any path sanitization or whitelist validation. The CVSS 3.1 score is 7.5 (High) , reflecting a network vector with no pr...

CVE-2026-75333

yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File for file system operations without any path sanitization or whitelist validation...