141137 matches found
BIT-JOOMLA-2026-90915 Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...
CVE-2026-92533
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-92533
A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...
CVE-2026-92533 Path Traversal in BugTracker.NET
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
EUVD-2026-94285
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-92533 Path Traversal in BugTracker.NET
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2021-41773.git1
CVE-2021-41773 Apache 경로 순회 취약점 CVE-2021-41773을 URL 목록에서 테스트하는 빠른 Python 도구 사용법 :- 라이브 URL 목록 파일을 만들고 "-l" 플래그를 사용하세요. python3 apachepathtraversal.py -l urls-list.txt...
USN-8893-1: Libwebsockets vulnerabilities
It was discovered that libwebsockets did not properly validate user-supplied data when parsing HTTP/2 HPACK path headers, which could result in a write past the end of an allocated buffer. An attacker could possibly use this issue to execute arbitrary code. CVE-2026-19773 It was discovered that...
wargame-tarpioka
BubbleTea CVE-2007-4559 “.tar”를 이용한 디렉토리 탐색 취약점으로 ../../flag path BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Current Building Instructions check docker docker ps docker images docker build -t tarpioka docker run -d -it --name...
CVE-2026-90466
Path traversal of 'trustedjarpaths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trustedjarpaths'. The startup flag 'trustedjarpaths' references URIs for loading files from local or remote filesystems. Path...
CVE-2026-5703
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
Exploit for CVE-2026-21589
CVE-2026-21589 — Atlassian Pre-Auth Arbitrary File Read → Crow...
CVE-2026-90466
Apache Impala version 4.5.2 is vulnerable to a path traversal vulnerability involving the trusted_jar_paths startup flag. An attacker can exploit this to load an attacker-controlled JAR file via a relative path, provided that a trusted path is already configured by an administrator. The attack is...
EUVD-2026-94223
Path traversal of 'trustedjarpaths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trustedjarpaths'. The startup flag 'trustedjarpaths' references URIs for loading files from local or remote filesystems. Path...
CVE-2026-90466 Apache Impala: Path traversal executes JARs outside trusted paths
Path traversal of 'trustedjarpaths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trustedjarpaths'. The startup flag 'trustedjarpaths' references URIs for loading files from local or remote filesystems. Path...
CVE-2026-5703
The Satel Iberia SenNet Datalogger Serie 200 contains a path traversal vulnerability in its web portal. An authenticated user can read arbitrary files or list directories accessible to the web server's system user by modifying the URL to include a path traversal payload . This vulnerability could...
CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
EUVD-2026-94221
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
CVE-2024-55187
概要 機微な管理パラメータは十分にサニタイズされていないため、攻撃者がシステムバイナリへのパスを汚染することを可能にします。 その後、攻撃者は危険なCSVファイルをアップロードできます。これらのファイルは、PHPの exec 呼び出しによって評価されるシェルのメタ文字を含むPHARアーカイブとして扱われる可能性があり、リモートコード実行につながります。 影響 サーバー乗っ取り サービス拒否 データ損失 CVSSスコア 緊急 - 9.1 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 詳細 ファイル...