PoC-CVE-2021-41773

CVE-2021-41773 PoC Proof of concept to check if hosts are vulnerable to CVE-2021-41773. Description https://vulners.com/cve/CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49-2.4.50. An attacker could use a path traversal attack to map URLs to file...

CVE-2026-107935

A path traversal vulnerability exists in gvproxy , the network forwarder component of the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint fails to validate caller-supplied socket paths, which could allow an attacker to delete arbitrary files on the host system. E...

EUVD-2026-95578

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

CVE-2026-107935

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...

mass_cve-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 Captura de pantalla Uso ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Nota ! los resultados se guardarán automáticamente en vuln.txt puedes agregar un directorio común en...

CVE-2026-19585

A flaw was found in go-getter. A remote attacker can exploit a path traversal vulnerability to write files outside of the intended target directory during directory downloads from Amazon Simple Storage Service S3 or Google Cloud Storage GCS. By supplying specially crafted file paths within a remo...

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

CVE-2025-64446 PoC - FortiWeb Path Traversal Descripción Proof of Concept para la vulnerabilidad de path traversal relativo en Fortinet FortiWeb CVE-2025-64446 que permite ejecución de comandos administrativos. Detalles Técnicos CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL...

CVE-H3C-Report

La gestión del sistema de los routers de la serie GR de H3C tiene una vulnerabilidad de acceso no autorizado Producto : Router serie GR versión : todas calificación : alto riesgo sitio web : http://www.h3c.com/ Riesgos : Los atacantes pueden explotar esta vulnerabilidad para obtener información...

CVE-2025-25279

Security Advisory MMSA-2025-00430 / CVE-2025-25279 Summary After uploading a file to Mattermost Boards, when the fileId parameter is modified and the board is copied, the file now points to and downloads the target file specified in the parameter. Affected Versions: Mattermost instances with Boar...

CVE-2020-14882

CVE-2020-14882 Oracle WebLogic Server Authentication Bypass Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0and 14.1.1.0.0. Easily exploitable vulnerability...

CVE-2021-41773

CVE-2021-41773 Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 CVE-2021-41773 Información Se encontró una falla en un cambio realizado en la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal salto de...

CVE-2024-53677-S2-067-thread

Disclaimer Do not use the related technologies in this article for illegal testing. Any direct or indirect consequences and losses caused by the dissemination or use of the information or tools provided in this article are solely the responsibility of the user. All adverse consequences arising fr...

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Contenedor Docker vulnerable de Apache Struts 2 Apache ha publicado recientemente un aviso sobre CVE-2023-50164, una vulnerabilidad crítica con una calificación de gravedad de 9.8 que afecta a Apache Struts 2. CVE-2023-50164 está intrincadamente vinculado a la arquitectura Apache...

CVE-2019-16278

Exploits para CVE-2019-16278 y CVE-2019-16279 Nostromo httpd es propenso a 2 vulnerabilidades críticas para versiones &1 Este error se debe a una corrección incompleta para CVE-2011-0751. Podemos omitir una comprobación de /../ lo que nos permite ejecutar /bin/sh con argumentos arbitrarios. Ejemp...

Apache-OFBiz-Directory-Traversal-exploit

Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...

CVE-2024-31848-PoC

Explotando CData en servidores Jetty - CVE-2024-31848/49/50/51 - Recorrido de Ruta y Lectura de Archivos Qué es Un PoC prototipo para la automatización del análisis de vulnerabilidades en objetivos que ejecutan aplicaciones CData en un servidor Jetty embebido. Uso Simplemente usa -u o --url para...

CVE-2015-3337

CVE-2015-3337 CVE-2015-3337 Lectura arbitraria de archivos http://10.10.20.166:9200/plugin/head/../../../../../../../../../etc/passwd Uso: python CVE-2015-3337.py python CVE-2015-3337.py / \ | | | | / | |/ | | | | || || || / | / / | | | | ' / /'| |/' || | | \ / / / / / / / / | | | | | | || / / |...

CVE-2021-41773

HTTP Apache Path Traversal NSE Script CVE-2021-41773 Description This NSE script checks if an Apache HTTP Server is vulnerable to the Path Traversal vulnerability CVE-2021-41773. A vulnerable server allows attackers to access files they shouldn't, without logging in. How It Works : 1. Script Star...

CVE-2019-5418

CVE-2019-5418 Test case Run : $ rails s PoC : Accept: ../../../../../../../../etc/passwd Req 1 - GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0 Accept: diyarbakirguzelbaglardelalelorke ------ CATCH Content-Lengt...