Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Shell Script to mitigate CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache Installation wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Usage Complete fix and suggested way to mitigate the vulnerabilty This script will...

CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

CVE-2026-105834

Rundeck versions before 6.2.0 are vulnerable to a path traversal vulnerability in the File Resource Model Source . This flaw allows users with only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to an absolute path. Attackers can exploit this vi...

EUVD-2026-93378

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

[SECURITY] [DLA 4825-1] suricata-update security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4825-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 06, 2026 https://wiki.debian.org/LTS -...

CVE-2020-14882-WebLogic-Analysis

Vulnerability Research: Exploitation of the CVE-2020-14882 and CVE-2020-14883 Chain in Oracle WebLogic Server The repository contains a technical report Write-up and a conceptual Proof of Concept PoC demonstrating the chained Authentication Bypass and Remote Code Execution RCE vulnerabilities in...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Tested against VMware VCSA 6.7 create ssh keypair ssh-keygen -t rsa -f vcsa.key -N '' create tarbal with ../../../../../home/vsphere-ui/.ssh/authorizedkeys python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar authorizedkeys mv evil.tar evil.ova uploa...

CVE-2026-8023

CVE-2026-8023 — Zephyr HTTP static-fs path traversal PoC Pre-auth path traversal in Zephyr's HTTP server static-fs handler subsys/net/lib/http when wildcard resource matching CONFIGHTTPSERVERRESOURCEWILDCARD=y is used with HTTPRESOURCETYPESTATICFS. Affects both HTTP/1.1 and HTTP/2. GHSA:...

patch-CVE-2026-06555

Patch: CVE-2026-06555 Vulnerability Details CVE : CVE-2026-06555 Product : SonicWall SMA Description : Path traversal Severity : High Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-02-25 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...

Amaranth-Project

Amaranth Project Utilize CVE-2025-8088 WinRAR path traversal vulnerability, ≤ 7.11 to implement a multi-stage backdoor implantation attack chain. 诱饵文档 → 恶意RAR → CVE触发 → ADS写入 → Stager执行 → 文件加载 → C2上线 Project Structure Directory| Content ---|--- Stage01Stage07/| Source code and test scripts for...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi patch bypass For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate CVE-2021-42013 , present in Apache HTTP Server 2.4.50. This CVE is the bypass of the patch...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...

CVE-2024-36991

CVE 2024-36991 A path-traversal vulnerability that allows an attacker to read files from the system. Technical Summary CVE : 2024-36991 Path Traversal Affected Systems : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 Legal Disclaimer This tool is provided for authorized security assessments only...

CVE-2021-41773

CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate and understand the vulnerability CVE-2021-41773 , present in Apache HTTP Server 2.4.49. The flaw reside...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction of CVE-2021-41773 , a path traversal vulnerability in Apache HTTP Server 2.4.49. This project uses Docker to create an isolated vulnerable environment and a Python PoC to demonstrate controlled file disclosure. Safety: The PoC only accep...

Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-

Incident Response Report: TeamCity Compromise CVE-2024-27198 Analyst: Belal Abdelsalam Date: July 2026 Lab/Environment: CyberDefenders JetBrains 📄 Executive Summary This report documents the forensic analysis of a compromised JetBrains TeamCity server version 2023.11.3. By analyzing the provided...

CVE-2026-104982

A flaw was found in Xreader. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted electronic publication EPUB document. Due to improper path sanitization in the EPUB file handler, the application is susceptible to path traversal, potentially leading to...

path-traversal-CVE-2026-14628

Demostración de Path Traversal - Caso de estudio: CVE-2026-14628 Una demostración mínima y ejecutable de la clase de vulnerabilidad Path Traversal CWE-22 , utilizando el recientemente divulgado CVE-2026-14628 como punto de referencia del mundo real. La vulnerabilidad real CVE-2026-14628 afecta a...