CVE-2026-59310

CVE-2026-59310 More root@kitploit: echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 root@kitploit: GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2026-16335

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal vulnerability (CWE-22) that allows a remote authenticated attacker to read, write, or delete arbitrary files. The CVSS v3.1 score is 8.1 (HIGH) , with low attack complexity, low privileges required, and no scope change; impact ...

CVE-2026-16335 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerability...

EUVD-2026-77798

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerability...

CVE-2026-73496

MCP Atlassian , a Model Context Protocol server for Confluence and Jira, is vulnerable to arbitrary server-side file read via attachment upload prior to version 0.22.0. The confluence_upload_attachment, confluence_upload_attachments, and jira_update_issue attachment functions pass a client-contro...

CVE-2026-73496 MCP Atlassian: Arbitrary server-side file read via attachment upload

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the confluenceuploadattachment and confluenceuploadattachments tools pass a client-controlled filepath through src/mcpatlassian/confluence/attachments.py uploadattachment, and the...

rsync: rsync: Unauthorized File Access via Symlink Module Root

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks...

rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

A path traversal and symlink vulnerability in rsync allows a malicious sender with write access to write files outside the intended directory. By exploiting symbolic links in conjunction with the --partial-dir or --backup-dir options, an attacker can bypass path restrictions to modify arbitrary...

Important: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An update for rsync is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

rsync: rsync: Arbitrary file write via path traversal in --relative mode

A path traversal vulnerability in rsync's --relative mode allows a malicious sender to craft symlink paths, enabling arbitrary file writes outside the destination directory...

CVE-2021-41381

CVE-2021-41381 Payara Micro Community 5.2021.6에 대한 디렉터리 트래버설Directory Traversal POC를 만들었습니다. 위 참조 필드를 참조하세요...

rsync: rsync: Arbitrary file write via path traversal in --relative mode

A path traversal vulnerability in rsync's --relative mode allows a malicious sender to craft symlink paths, enabling arbitrary file writes outside the destination directory...

rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

A path traversal and symlink vulnerability in rsync allows a malicious sender with write access to write files outside the intended directory. By exploiting symbolic links in conjunction with the --partial-dir or --backup-dir options, an attacker can bypass path restrictions to modify arbitrary...

Important: Red Hat Security Advisory: rsync security, bug fix, and enhancement update

An update for rsync is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

rsync: rsync: Unauthorized File Access via Symlink Module Root

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks...

ninja-form-exploit

ninja-form-exploit CVE-2026-0740 — WordPress의 Ninja Forms 파일 업로드 경로 탐색path traversal 취약점을 위한 멀티스레드 취약점 스캐너. 설명 main.py는 WordPress 대상 목록을 스캔하여 Ninja Forms File Uploads 플러그인이 CVE-2026-0740에 취약한지 확인합니다. 간단한 흐름은 다음과 같습니다: 1. URL 정규화 http/https, 끝의 슬래시 제거 2. 메인 페이지의 nfpluginsettings.js 마커를 통한 플러그인 감지 ...

Java-Compressed-file-security

Java-Compressed-file-security Java 웹 압축 파일 보안 취약점 테스트 환경: root@kitploit: Windows For Apache Tomcat/8.5.16 0x01 디렉터리 트래버설 악성 압축 파일 제작 코드: root@kitploit: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary = f.read zipFile = zipfile.ZipFile"test.zip",...

best-CVE-2025-8088

CVE-2025-8088 WinRAR 익스플로잇 🔓 CVE-2025-8088 WinRAR 취약점버전 7.12 이하에 대한 개념 증명 익스플로잇입니다. 이 도구는 경로 탐색을 통해 페이로드를 대체 데이터 스트림ADS에 임베드하는 악성 RAR 아카이브를 생성하여 잠재적으로 임의 코드 실행을 유발합니다. 다른 많은 익스플로잇의 문제는 여러 ADS 스트림을 임베드하지 않아서 올바른 경로 탐색을 운에 맡기거나 정확한 사용자 이름/추출 디렉터리를 알아야 한다는 점입니다. 🚀 작동 방식 1. 미끼 문서 생성 📄 - 전문적인 PDF 이력서 ...

watchTowr-vs-SmarterMail-CVE-2025-52691

CVE-2025-52691 SmarterMail Pre-Auth RCE SmarterMail Pre-Auth RCE 1day 検出アーティファクト生成ツール 検出の動作 Detection Artifact Generator は、.aspx ファイルを C:\Program Files x86\SmarterTools\SmarterMail\Service\AppData ディレクトリ（ビルド 94xx）または C:\Program Files x86\SmarterTools\SmarterMail\MRS\AppData ディレクトリ（ビルド...

CVE-2026-89021

MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files outside the container root by supplying a crafted container image with symlinks pointing to arbitrary paths. Attackers can exploit...