141144 matches found
CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal
🚨 CVE-2026-87902: WordPress Core Path Traversal No Autenticado y Mitigación de RCE 🔴 Mira el Análisis Completo y el Tutorial de Mitigación: 👉 Haz Clic Aquí para Ver en YouTube 📖 Descripción General Este repositorio proporciona notas de referencia de emergencia, reglas de mitigación para servidore...
BIT-JOOMLA-2026-90915 Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3
Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...
CVE-2026-92533
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-92533
A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...
CVE-2026-92533 Path Traversal in BugTracker.NET
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
EUVD-2026-94285
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-92533 Path Traversal in BugTracker.NET
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2021-41773.git1
CVE-2021-41773 Herramienta rápida en Python para probar el path traversal de Apache CVE-2021-41773 en una lista de URLs Uso :- crea un archivo de URLs activas y usa el flag "-l" python3 apachepathtraversal.py -l urls-list.txt...
USN-8893-1: Libwebsockets vulnerabilities
It was discovered that libwebsockets did not properly validate user-supplied data when parsing HTTP/2 HPACK path headers, which could result in a write past the end of an allocated buffer. An attacker could possibly use this issue to execute arbitrary code. CVE-2026-19773 It was discovered that...
wargame-tarpioka
BubbleTea CVE-2007-4559 Vulnerabilidad de path traversal mediante “.tar” que permite acceder a ../../flag ruta BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Instrucciones de compilación actuales verificar docker docker ps docker...
CVE-2026-5703
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
CVE-2026-90466
Path traversal of 'trustedjarpaths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trustedjarpaths'. The startup flag 'trustedjarpaths' references URIs for loading files from local or remote filesystems. Path...
Exploit for CVE-2026-21589
CVE-2026-21589 — Atlassian Pre-Auth Arbitrary File Read → Crow...
CVE-2026-90466
Apache Impala version 4.5.2 is vulnerable to a path traversal vulnerability involving the trusted_jar_paths startup flag. An attacker can exploit this to load an attacker-controlled JAR file via a relative path, provided that a trusted path is already configured by an administrator. The attack is...
EUVD-2026-94223
Path traversal of 'trustedjarpaths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trustedjarpaths'. The startup flag 'trustedjarpaths' references URIs for loading files from local or remote filesystems. Path...
CVE-2026-90466 Apache Impala: Path traversal executes JARs outside trusted paths
Path traversal of 'trustedjarpaths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trustedjarpaths'. The startup flag 'trustedjarpaths' references URIs for loading files from local or remote filesystems. Path...
CVE-2026-5703
The Satel Iberia SenNet Datalogger Serie 200 contains a path traversal vulnerability in its web portal. An authenticated user can read arbitrary files or list directories accessible to the web server's system user by modifying the URL to include a path traversal payload . This vulnerability could...
CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
EUVD-2026-94221
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...