apache-cve-2021-41773-lab

Apache 2.4.49 Path Traversal Lab — CVE-2021-41773 Clone git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Usage Start the vulnerable server: ./apachelab.sh choose option 1 Manual exploit: curl --path-as-is...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

EUVD-2026-95103

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-107709

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3 . The issue is located in lib/decompress-zip.js, where the software improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive with entries resolving to prefix-sibling directories can ca...

CVE-2026-107709 Bower decompress-zip has a path traversal vulnerability

A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in lib/decompress-zip.js improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause fil...

CVE-2026-85706-PoC

CVE-2026-85706: GitLab CE/EE における未認証の任意ローカルファイル読み取り CVE-2026-85706 は、GitLab CE/EE の Repository Commits API および Repository Files API における重大なパストラバーサル / 認証欠如の問題です。未認証の攻撃者がサーバーに任意のファイルを読み取らせ、その内容をエラーチャネル経由で取得できます。CVSS 3.1 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N。 GitLab の公式タイトルは 「Path...

EUVD-2026-42895

PraisonAI: Project config can auto-save agent output outside the project root...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

CVE-2021-41773 및 CVE-2021-42013 악용 도구 Apache/2.4.49-2.4.50에서의 경로 탐색 공격 및 RCE 기능 - URL 목록 입력 가능 - CGI 및 비-CGI 모두 지원 - Apache/2.4.49 - 2.4.50 지원 사용법 $ git clone https://github.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit $ cd Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit && pip...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana 인증 없이 파일 읽기 영향 버전: 8.0.0-lastest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host: 127.0.0.1:3000 User-Agent: Mozilla/5.0...

ksmbrace

ksmbrace ksmbd 의 취약점 연구: Linux 커널의 커널 내장 SMB3 서버fs/smb/server/입니다. 인증된 공격자 관점의 결함으로, ksmbd의 durable-handle 및 path-resolution 경로에서 발생합니다. 이 이름은 이 작업의 레이스 컨디션 테마를 암시합니다비공개된 byte-range-lock UAF, CVE-2026-64396 참고, d20d1c8ba576에서 수정됨. 두 CVE 모두 업스트림에서 수정되었습니다. 각 하위 디렉터리는 해당 CVE 이름으로 명명되며, 간단한 분석writeu...

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager Sonatype Nexus Repository Manager 는 빌드 아티팩트를 저장하기 위한 중앙 플랫폼을 제공합니다. CVE-2024-4956 는 Sonatype Nexus Repository Manager의 경로 탐색 취약점으로, 공격자가 인증 없이 Nexus Repository 애플리케이션 범위 밖의 시스템 파일을 포함한 임의의 파일을 다운로드로 반환하는 URL을 조작할 수 있게 합니다. 영향받는 버전 : Sonatype Nexus...

Security Bulletin: Go-getter vulnerable to a path traversal in S3/GCS directory download handling

Summary HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 a...

CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal

CVE-2026-54917 — SeaweedFS S3 게이트웨이 교차 버킷 경로 탐색 CVE-2026-54917 에 대한 개념 증명PoC 및 기술 문서입니다. SeaweedFS S3 API 게이트웨이의 경로 탐색path traversal 취약점으로, 호출자가 자격 증명이 허용하는 범위와 관계없이 모든 버킷 의 객체에 접근할 수 있게 합니다. | ---|--- CVE| CVE-2026-54917 보안 권고| GHSA-w62w-66v9-vvgv 제품| SeaweedFS — S3 API 게이트웨이 weed s3, 및 weed...

CVE-2026-52680_exploit

CVE-2026-52680 — Apache Kyuubi REST 배치 경로 탐색 임의 파일 쓰기 Apache Kyuubi의 REST API에서 multipart 배치 제출 엔드포인트를 통해 발생하는 인증되지 않은 임의 파일 쓰기 취약점입니다. POST /api/v1/batches multipart/form-data는 resourceFile 파트를 클라이언트가 제공한 파일명 을 사용해 경로 탐색 검사 없이 $KYUUBIHOME/work/upload//에 기록합니다 kyuubi-common의 Utils.writeToTempFile...

CVE-2026-19585

HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to be written outside the requested destination. This vulnerability CVE-2026-19585 is fixed in go-getter 1.8.10 and...

tinyfilemanager-2.4.3-exploit

CVE-2021-45010 Tiny File Manager-2.4.3 익스플로잇 Tiny File Manager Project의 Tiny File Manager = 2.4.6에 포함된 tinyfilemanager.php의 파일 업로드 기능에 존재하는 경로 탐색Path traversal 취약점으로 인해, 유효한 사용자 계정을 가진 원격 공격자가 악성 PHP 파일을 웹 루트에 업로드하고 대상 서버에서 코드 실행을 수행할 수 있습니다...

CVE-2026-5027

🔥 CVE-2026-5027 - Langflow Path Traversal Arbitrary File Write to RCE Unauthenticated Remote Code Execution via File Upload -orange?style=for-the-badge 📌 Overview Langflow suffers from a critical path traversal vulnerability in the file upload endpoint POST /api/v2/files. An attacker can send a...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

CVE-2026-87902

CVE-2026-87902 PoC — WordPress Path Traversal → LFI → Conditional RCE WordPressgetpagetemplate — Unauthenticated Path Traversal → Local File Inclusion → Conditional RCE A security research tool for detecting and testing CVE-2026-87902 / GHSA-7hp8-65ch-5whp , including vulnerability scanning and...

cve-2021-41773-source-code-analysis

Apache HTTP Server CVE-2021-41773 Source Code Analysis A Python-based static patch analysis tool for studying the root cause and remediation of CVE-2021-41773 Apache HTTP Server Path Traversal by comparing the vulnerable Apache HTTP Server 2.4.49 source code with the patched 2.4.51 implementation...