CVE-2021-43798-Grafana-path-traversal-tester

Grafana Path Traversal Tester This script automates the testing of known Grafana plugin endpoints for potential path traversal vulnerabilities using curl. 🛠 Features Reads target paths from a file e.g. paths.txt Sends HTTP requests using --path-as-is to bypass normalization Captures HTTP status...

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 es una vulnerabilidad de path traversal de alta gravedad puntuación CVSS 3.1: 7.5 que afecta a Grafana versiones 8.0.0-beta1 hasta 8.3.0. Permite a atacantes no autenticados leer archivos arbitrarios del servidor explotando una sanitización incorrecta en el endpoint...

CVE-2021-43798

CVE-2021-43798: Vulnerabilidad de lectura de archivos arbitrarios en Grafana Se añadió la plantilla nuclei para identificación de todas las versiones en Windows+Linux Lista de 52 plugins: root@kitploit: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeg...

CVE-2021-43798

uso: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: los siguientes argumentos son requeridos: -H/--host ejemplo: python3 grafana-exploit.py --host si se lee exitosamente un archivo arbitrario muestra la URL de la solicitud y el comando curl root@kitploit: +RequestURL...

EUVD-2026-84870

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to enforce a request body size limit during CSRF validation of plugin requests which allows an authenticated user to exhaust server memory and cause a denial of service via a large request body sent to ...

GrafTraverse-CVE-2021-43798

GrafTraverse - CVE-2021-43798 MiNi Framework de Explotación Herramienta de automatización de línea de comandos para pruebas de seguridad autorizadas de Directory Traversal de Grafana CVE-2021-43798. Resumen CVE-2021-43798 es una vulnerabilidad de directory traversal no autenticada en Grafana 8.x...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pre-Auth Todo el crédito es para j0v y su tweet https://twitter.com/j0v0x0/status/1466845212626542607 Aviso legal Esto es solo con fines educativos. No soy responsable de tus acciones. Úsalo bajo tu propio criterio. De buena fe, he retenido la publicación...

CVE-2026-12609

In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the @theia/plugin-ext backend exposes the /hostedPlugin/:pluginId/:path HTTP endpoint, which resolves the requested file path with path.resolvelocalPath, filePath without verifying that the resolved path stays within the plugin's...

CVE-2026-12609

In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the @theia/plugin-ext backend exposes the /hostedPlugin/:pluginId/:path HTTP endpoint, which resolves the requested file path with path.resolvelocalPath, filePath without verifying that the resolved path stays within the plugin's...

CVE-2026-12609

In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the @theia/plugin-ext backend exposes the /hostedPlugin/:pluginId/:path HTTP endpoint, which resolves the requested file path with path.resolvelocalPath, filePath without verifying that the resolved path stays within the plugin's...

CVE-2026-12609

CVE-2026-12609 affects Eclipse Theia (versions 1.66.0 to 1.73.1) where the backend of the @theia/plugin-ext module exposes the /hostedPlugin/:pluginId/:path(*) endpoint. The endpoint resolves the requested path with path.resolve(localPath, filePath) without ensuring the result stays within the pl...

EUVD-2026-44955

Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...

CVE-2026-4275

CVE-2026-4275 affects the Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress up to version 4.2.3. The vulnerability is a Cross-Site Request Forgery (CSRF) flaw arising from using __return_true as the permission_callback for the /install_plugin and /activate_plugin REST...

CVE-2026-4275

The Divi Torque Lite – Divi Theme, Divi Builder & Extra Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is due to the use of 'returntrue' as the permissioncallback for the /installplugin and /activateplugin REST API endpoint...

CVE-2026-50869

An issue in the api/plugin.php component of Bludit v3.19.0 allows attackers to execute a directory traversal via supplying a crafted request...

CVE-2026-9109 GPTranslate <= 2.31 - Unauthenticated Stored Cross-Site Scripting via REST API Translation Storage

The GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API Translation Storage in all versions up to, and including, 2.31 due to insufficient input sanitization and output escaping...

Portainer 安全漏洞

Portainer is a lightweight user management interface developed by Portainer Foundation for managing Docker environments and Docker hosts. Vulnerabilities exist in versions of Portainer Community Edition from 2.33.0 to 2.33.8, as well as in versions prior to 2.39.2 and 2.41.0. These vulnerabilitie...

CVE-2026-33719 AVideo Vulnerable to Unauthenticated CDN Configuration Takeover via Empty Default Key Bypass and Mass-Assignment in status.json.php

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the CDN plugin endpoints plugin/CDN/status.json.php and plugin/CDN/disable.json.php use key-based authentication with an empty string default key. When the CDN plugin is enabled but the key has not been configured...

CVE-2026-33681 AVideo has Path Traversal in pluginRunDatabaseScript.json.php Enables Arbitrary SQL File Execution via Unsanitized Plugin Name

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the objects/pluginRunDatabaseScript.json.php endpoint accepts a name parameter via POST and passes it to Plugin::getDatabaseFileName without any path traversal sanitization. This allows an authenticated admin or a...

CVE-2026-33681

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the objects/pluginRunDatabaseScript.json.php endpoint accepts a name parameter via POST and passes it to Plugin::getDatabaseFileName without any path traversal sanitization. This allows an authenticated admin or a...