CVE-2026-21857

CVE-2026-21857: Redaxo 백업 애드온의 경로 탐색으로 인한 임의 파일 읽기 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-21857 심각도| HIGH 권고| 권고 보기 발견자| Lukasz Rybak 영향을 받는 제품 redaxo/source 버전: = 5.20.1 CWE 분류 CWE-22: 제한된 디렉터리에 대한 경로명 제한 미흡'경로 탐색' CWE-24: 경로 탐색: '../filedir' 상세 정보 요약 백업 권한이 있는 인증된 사용자는 Backup 애드온의 파일 내보내기 기능에서 경...

CVE-2026-105275

Satel Netco Design versions prior to v2.1.7 are vulnerable to a relative path traversal vulnerability within the data import functionality . An authenticated user with Viewer privileges can exploit this flaw to access file paths outside the intended directory and use observable application respon...

CVE-2026-105275 Satel Netco Design Relative Path Traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files...

CVE-2026-19493

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-101024 Satel Netco Design Relative path traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 are vulnerable to a relative path traversal vulnerability within the data export functionality . An authenticated user with Viewer privileges can exploit this flaw to write attacker-influenced content to file system locations accessible to the applicati...

EUVD-2026-95286

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-19493 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal...

EUVD-2026-95274

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal...

CVE-2026-19493

IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 are vulnerable to a path traversal flaw. This vulnerability could allow a remote attacker to perform an arbitrary file write . Exploitation details are not provided in the documen...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

CVE-2024-38816-PoC

CVE-2024-38816 Доказательство концепции PoC Это доказательство концепции для уязвимости CVE-2024-38816, демонстрирующее эксплуатацию обхода пути. Шаги выполнения 1. Соберите Docker-образ: Spring Boot 3.0.13, на основе Spring Framework 6.0.3 docker build -t cve-2024-38816-poc . 2. Запустите...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Код концепции proof of concept на C для эксплуатации пути извлечения файлов ACE в WinRAR CVE-2018-20250. Ресурсы https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Зависимости...

openlore-PoC

OpenLore 스펙 생성 작성기에서 정제되지 않은 LLM 유래 domain 필드를 통한 경로 순회 CVE 상태: 요청됨, 할당 대기 중. 이 발견은 GHSA-5j8x-q7q6-58j5로 공개되었습니다. CVE가 할당되면 이 저장소는 CVE-YYYY-NNNNN-openlore-PoC로 이름이 변경되고 이 배너는 CVE 링크로 대체됩니다. | ---|--- 연구자| Dostxodjayev Abdullox @squeeze440 권고| GHSA-5j8x-q7q6-58j5 CVSS 3.1| 4.7 Medium 취약점| CWE-22,...

cve-2026-47627

CVE-2026-47627 — NVIDIA Triton Inference Server 경로 탐색 → DoS Zip-Slip 이 저장소의 전체 연구 결과 및 PoC 상세 문서nvcr.io/nvidia/tritonserver:26.05-py3 이미지 / server v2.69.0. 저장소는 항상 explicit 모드로 설정되어 gRPC를 통한 재시작 없는 PoC를 지원합니다. 목차 1. CVE 요약 2. 실험실 환경 3. 취약점 구조 4. 근본 원인 분석 Diff 26.05 → 26.06 5. 공격 경로: 실제로 영향받는 경로는?...

CVE-2024-53677

이 게시물은 EQSTLab에서 발행한 연구 기사입니다. CVE-2024-53677 ★ CVE-2024-53677 위험한 유형의 파일 무제한 업로드 및 RCE PoC ★ 실습 환경 구성 cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit nofile=122880:122880 -m 3G --rm -it --name cve-2024-53677 cve-2024-53677 타임라인 12월...

CVE-2025-4138-poc

CVE-2025-4138 Auto-Sudo Generator Скрипт на Python для генерации вредоносного tar-архива, эксплуатирующего CVE-2025-4138 / CVE-2025-4517 обход пути через усечение PATHMAX. Успешная эксплуатация этой уязвимости позволяет атакующему обойти фильтры извлечения tarfile и записать произвольные файлы в...

CVE-2025-66249-POC

CVE-2025-66249 — Обход белого списка при обходе пути в Apache Livy Только для образовательных целей и исследований в области безопасности. Не используйте против систем, которыми вы не владеете или на тестирование которых у вас нет явного письменного разрешения. →Полное предупреждение Обзор Поле|...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 Тестер уязвимости Автоматизированный инструмент тестирования безопасности для CVE-2023-33177 — уязвимость Zip Slip Path Traversal в Xibo CMS, приводящая к удаленному выполнению кода RCE. ⚠️ Отказ от ответственности Этот инструмент предназначен только для образовательных...