CVE-2019-19654

CVE-2019-19654 Chevereto déni de service - = 3.13.5 Core dans l'outil /dashboard/bulk. Un attaquant disposant d'un compte administrateur peut insérer n'importe quel chemin. L'importateur en masse supprimera tout fichier et dossier auquel il a accès. En gros, vous pouvez faire autodétruire le site...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Консультация 06 - 25/02/05 Программа: phpBB 2.0.12 Домашняя страница: http://www.phpbb.com Уязвимые версии: phpBB 2.0.12 и более ранние версии Риск: Низкий риск!! Воздействие: Раскрытие полного пути -==phpBB 2.0.12 Раскрытие...

CVE-2026-102413

The Elastic Defend component within Elastic Agent / Endpoint is vulnerable to a Denial of Service (DoS) due to an Uncaught Exception (CWE-248) . When processing a specially crafted file name on Windows hosts using specific system locales (such as Chinese, Japanese, or Korean ), an unhandled excep...

CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation

🚨 CVE-2024-32019 - Exploitation de la vulnérabilité de PATH dans ndsudo de Netdata LPE vers root Un exploit basé sur Python pour CVE-2024-32019 , une vulnérabilité de haute sévérité d'élévation de privilèges locaux dans l'Agent Netdata , exploitant un binaire SUID mal configuré ndsudo qui ne gère...

cve-2018-19052

cve-2022-19052 modalias sécurité : contournement de chemin potentiel avec des configurations spécifiques Sécurité : contournement potentiel d'un seul répertoire au-dessus de la cible de l'alias avec une configuration modalias spécifique où l'alias correspondant ne se termine pas par /, mais le...

cve-2026-105221-gist-tls

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-105221-gist-tls cve-2026-105221-gist-tls gist RubyGem 6.1.0 - defunkt httpconnection устанавливает OpenSSL::SSL::VERIFYNONE. HTTPS до GitHub всё ещё шифрует трафик, но принимается любой сертификат. Узел на...

TProxer

TProxer Une extension Burp Suite conçue pour automatiser la recherche de SSRF basée sur le chemin du proxy inverse. Fonctionnement • Installation • À faire • Rejoindre Discord Fonctionnement Tente d'accéder aux API ou fichiers internes via une attaque SSRF basée sur le chemin. Par exemple, sur...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Скрипт Proof-of-concept для CVE-2020-3452 — уязвимости Path Traversal в Cisco ASA/FTD. Поддерживает автоматизированное извлечение известных целевых файлов с жёстким ограничением на количество успешных загрузок для безопасности. Предназначен только для...

CVE-2026-79809

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager . This flaw allows a remote attacker to influence authorization decisions and potentially be assigned an unintended role . No specific version numbers, root cause details, or remediation steps ar...

CVE-2026-79809 Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...

EUVD-2026-93895

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...

EUVD-2026-93891

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system...

CVE-2026-79805

An authenticated path traversal vulnerability exists in ClearPass Policy Manager . Exploitation of this flaw could allow an authenticated attacker to read and modify certain files on the underlying operating system. No specific software versions, root causes, or remediation steps are provided in ...

CVE-2026-79805 Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system...

EUVD-2026-93887

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager . A low-privileged authenticated remote attacker could exploit this flaw to achieve remote code execution with elevated privileges on the underlying operating system. No specific patch v...

CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...