69415 matches found
CVE-2025-68705
CVE-2025-68705 - RustFS 路径遍历漏洞利用工具 描述 该脚本利用了 RustFS 中的一个路径遍历漏洞（CVE-2025-68705），可允许读取服务器上的任意文件。 环境要求 Python 3.6+ 依赖项见 requirements.txt 安装 git clone https://github.com/yourusername/CVE-2025-68705.git cd CVE-2025-68705 pip install -r requirements.txt 使用方法 python exp.py -H -p -f -s 必需参数 参数| 说明 ---|--...
cybersecurity_portfolio
作品集。乌索利采夫·格列布 圣彼得堡彼得大帝理工大学计算机科学与网络安全学院二年级学生，专业方向 10.03.01「信息安全」。 在«Positive Technologies»股份公司进行教学（认知）实习期间，完成了两个实践案例。以下以技术材料形式给出这些案例的描述，未采用教学报告特有的排版格式。 实践工作由学习小组共同完成：班杜尔科 В. В.、乌索利采夫 Г. В.、乌斯季扬采夫 А. С. 案例 部署 SIEM Wazuh：检测 SSH 暴力破解 wazuh-siem-deployment 部署 Wazuh，创建自定义检测规则，配置索引模板，接入代理，并构建针对服务器的攻击可视化...
cve-2021-41773
CVE-2021-41773 CVE-2021-41773: Apache HTTP服务器中的路径遍历零日漏洞被利用 Apache HTTP服务器CVE-2021-41773在野外被利用 CVE-2021-42013: Apache HTTP服务器2.4.49和2.4.50中的路径遍历与远程代码执行（CVE-2021-41773的不完整修复） Shodan 一行命令 shodan search Apache Server 2.4.49 | awk 'print $1":"$2' | while read host do ; do curl --silent --path-as-is...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...
CVE-2026-87902-Toolkit
CVE‑2026‑87902 – WordPress Unauth LFI→RCE Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act UK...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
CVE-2026-85490
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
gin-vulnerable
gin-vulnerable 演示消费者固定使用 github.com/gin-gonic/gin v1.7.0（存在 CVE-2023-29401 漏洞）。/download/:filename 处理器直接将用户输入传递给 Context.FileAttachment——这是 Endor 标记为可利用的漏洞利用条件模式。...
apache-web-log-analysis-lab
Apache Web日志分析实验室 蓝队实验室，专注于分析Apache HTTP服务器日志，以检测Web扫描活动、目录枚举和路径遍历尝试。 目标 在隔离的实验室环境中安装并暴露一个Apache Web服务器，使用行业标准工具模拟自动化Web扫描，并从蓝队角度分析生成的日志——识别攻击模式、工具签名以及恶意侦察活动的指标。 环境 组件| 详情 ---|--- 攻击者虚拟机| Kali Linux 目标虚拟机| Debian 13 网络| NAT网络 VirtualBox 攻击者IP| 10.0.2.5 目标IP| 10.0.2.15 Web服务器| Apache 2.4.67 日志来源|...
Exploit for Path Traversal in Apache Http_Server
Apache HTTP Server 2.4.49 Path Traversal CVE-2021-41773 Vu...
CVE-2026-85490
Brocade ASCG versions prior to 3.5.0 are vulnerable to an arbitrary file write via a path traversal flaw. The application fails to sanitize path traversal sequences within support bundle archives ingested from remote compromised endpoints before extraction. An unauthenticated remote attacker who ...
CVE-2026-85490
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
EUVD-2026-94794
When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained within archive entries prior to extraction. An unauthenticated remote attacker capable of sending or intercepting...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
CVE-2026-85487
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0 . An unauthenticated attacker located on the local network can send manipulated API requests to the service endpoint to bypass path restrictions. This flaw could lead to arbitrary file read, ...
EUVD-2026-94790
A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...
CVE-2018-13379
CVE-2018-13379 - FortiGate SSL-VPN 路径遍历 PoC 描述 针对 CVE-2018-13379 的概念验证脚本，该漏洞是 Fortinet FortiGate SSL VPN Web 门户中的一个严重路径遍历漏洞。攻击者无需认证即可通过特制的 HTTP 资源请求下载系统文件，可能导致包含敏感信息的会话文件泄露。 漏洞详情 CVE ID ：CVE-2018-13379 CVSS 评分 ：9.8（严重） 受影响版本 ：FortiOS 6.0.0 至 6.0.4、5.6.3 至 5.6.7、5.4.6 至 5.4.12 漏洞端点 ：/remote/fgtlan...
duplicate-CVE-2025-4720-
cve-srms-drop-student-path-traversal CVE-2025-4720dupe SourceCodester SRMS 1.0 任意文件删除漏洞 描述 SourceCodester 学生成绩管理系统（SRMS）1.0 的 dropstudent.php 端点存在路径遍历漏洞。 该应用程序从 img GET 参数获取用户可控输入，并在未经验证的情况下直接将其传递给 unlink 函数，从而允许删除服务器上的任意文件。 漏洞代码 $img = $GET'img'; if $img == "DEFAULT" else unlink'images/students/...
CVE-2026-86828
The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code...