EUVD-2026-94221

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...

CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...

CVE-2026-5703

The Satel Iberia SenNet Datalogger Serie 200 contains a path traversal vulnerability in its web portal. An authenticated user can read arbitrary files or list directories accessible to the web server's system user by modifying the URL to include a path traversal payload . This vulnerability could...

CVE-2025-55182

CVE-2025-55182 - RCE des composants serveur React NOTE : Écrit par IA/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 est une vulnérabilité RCE critique dans le protocole Flight de React. La chaîne d'attaque combine traversée de chemin + injection de faux chunk + abus...

CVE-CVE-2025-25231

CVE-2025-25231 Nuclei Template تم كتابة هذا القالب لأداة Nuclei لاكتشاف الثغرة CVE-2025-25231 Path Traversal ثانوي في منتج Omnissa Workspace ONE UEM. شرح الثغرة CVE-2025-25231 هي ثغرة من نوع Path Traversal تسمح للمهاجم بالوصول إلى ملفات حساسة للقراءة فقط على الخادم عن طريق إرسال طلبات GET معدلة إ...

CVE-2023-50164

Exploit CVE-2023-50164 pour le laboratoire HackTheBox Description Cet exploit a été développé spécifiquement pour le laboratoire Strutted de HackTheBox , visant à exploiter la vulnérabilité CVE-2023-50164 dans Apache Struts 2. La faille permet un path traversal via une faille dans le traitement d...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Vulnérabilité de traversée de chemin et de divulgation de fichiers dans Apache HTTP Server 2.4.49 Une faille a été découverte dans une modification apportée à la normalisation des chemins dans Apache HTTP Server 2.4.49. Un attaquant pourrait utiliser une attaque de traversée de...

CVE-2023-32315

CVE-2023-32315 GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...

CVE-2021-41773

CVE-2021-41773 — Exploitation de contournement de chemin et RCE Apache Writeup de la salle TryHackMe « Modern Web Stacks » , axée sur l'exploitation de CVE-2021-41773 , une vulnérabilité de contournement de chemin dans Apache HTTP Server 2.4.49 qui conduit à une exécution de code à distance lorsq...

QNAP Photo Station - Path Traversal

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. id: CVE-2019-7195 info: name: QNAP Photo Station - Path Traversal author: s4e-io severity: critical description: | QNAP devices running Pho...

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

ZKTeco BioTime v8.5.5 - Path Traversal

A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. id: CVE-2023-38950 info: name: ZKTeco BioTime v8.5.5 - Path Traversal author: iamnoooob,pdresearch severity: high description: | A pa...

CVE-2026-97671

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2025-52691

CVE-2025-52691 SmarterMail: неаутентифицированная произвольная загрузка файлов RCE Обзор Критическая уязвимость неаутентифицированной произвольной загрузки файлов, позволяющая удалённо выполнять код. Поле| Значение ---|--- Продукт| SmarterMail Затронутые| Сборка 9406 и ранее CVSS| 10.0 Критически...

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 بيئة اختبار وقالب Nuclei يحتوي هذا المستودع على قالب Nuclei عالي الثقة للكشف عن CVE-2021-21980 اجتياز المسار في vSphere Web Client وبيئة محاكاة صغيرة تعيد إنتاج السلوك الضعيف للاختبار المحلي الآمن. الملفات: cve-2021-21980.yaml: قالب Nuclei مع متغيرات ترميز متعد...

CVE-2026-97671

IBM Langflow OSS versions 1.0.0 through 1.12.2 are susceptible to a path traversal vulnerability (CWE-22 ). This flaw could allow a remote authenticated attacker to obtain sensitive information . No specific exploit details, impacts beyond information disclosure, or remediation steps are provided...

EUVD-2026-94120

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2026-97671 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

PT-2026-107480

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

PT-2026-107395

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...