CVE-2026-10053-lab

CVE-2026-10053 — laboratoire de vérification reproductible Laboratoire autonome qui prouve le path traversal du registre de paquets npm de GitLab CVE-2026-10053 et montre qu'il est corrigé, à l'aide d'un oracle déterministe sur disque — pas du statut HTTP. Ce qui est prouvé et ce qui ne l'est pas...

CVE-2026-55846 Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure open uses URI.getPath in Commands.setUpServer in allure-commandline/src/main/java/io/qameta/allure/Commands.java and passes the...

CVE-2026-76440

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

cve-2021-41773-and-cve-2021-42013

cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...

CVE-2026-34151 XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+

XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve double-encoded parent-directory segments outside the intended skin or web-application resource prefix when Jetty 12 or later decodes the request path. The affected...

CVE-2026-34151

XWiki Platform prior to 17.10.5 and 18.2.0 is vulnerable to resource path traversal via the /skin/ action endpoint (com.xpn.xwiki.web.SkinAction) when running on Jetty 12 or later . Jetty 12's decoding of the request path allows double-encoded parent-directory sequences (..%252f) to escape the in...

CVE-2026-34151 XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+

XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve double-encoded parent-directory segments outside the intended skin or web-application resource prefix when Jetty 12 or later decodes the request path. The affected...

CVE-2026-34908-check

Script de détection de chaîne RCE non authentifiée sur UniFi OS Server Un détecteur sûr pour la chaîne d'exécution de code à distance non authentifiée sur UniFi OS Server ≤ 5.0.6, divulguée dans le Bulletin d'avis de sécurité 064 d'Ubiquiti : CVE| Classe| Rôle dans la chaîne ---|---|---...

CVE-2010-4231-EXPLOIT

CVE-2010-4231 - Уязвимость обхода каталогов в IP-камерах Camtron и TecVoz CVE-2010-4231 — это уязвимость обхода каталогов, существующая в веб-интерфейсе администрирования IP-камер Camtron CMNC-200 Full HD и TecVoz CMNC-200 Megapixel. Уязвимость позволяет удалённым злоумышленникам читать...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

CVE-2024-40422

CVE-2024-40422 Implémentation Python/PoC pour CVE-2024-40422. Exploite une vulnérabilité critique de traversée de répertoire dans le point de terminaison /api/get-browser-snapshot de Devika v1 pour lire des fichiers système arbitraires...

CVE-2026-7275-moodle

CVE-2026-7275-moodle PoC & documentation for CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs — Path Traversal / Arbitrary File Write that can lead to RCE on unpatched Moodle versions. Disclaimer: For authorized security research, auditing, and defensive education only. Do not...

CVE-2024-45436

Ollama CVE-2024-45436 Exploit A clean and efficient exploit implementation for the Ollama ZIP traversal vulnerability CVE-2024-45436. 中文文档：READMECN.md Vulnerability Description CVE-2024-45436 is a path traversal vulnerability also known as "Zip Slip" in Ollama versions prior to 0.1.47. The...

CVE-2021-41773

CVE-2021-41773 🐛 Уязвимость обхода пути и раскрытия файлов в Apache HTTP Server 2.4.49 Ошибка была обнаружена в изменении, внесённом в нормализацию путей в Apache HTTP Server 2.4.49. Злоумышленник может использовать атаку обхода пути для сопоставления URL с файлами за пределами каталогов,...

Gitea-template-sync-Path-Traversal-Privilege-Escalation-CVE-2026-38526-

Nexus — PoC d'élévation de privilèges locale Traversée de chemin via la synchronisation de modèles Gitea avec des objets Git forgés → root Un exploit de preuve de concept pour l'élévation de privilèges sur la machine HackTheBox Nexus. Un service systemd appartenant à root synchronise les dépôts d...

CVE-2023-32315

CVE-2023-32315 La console d'administration d'Openfire Admin Console, une application web, s'est avérée vulnérable à une attaque par traversée de chemin via l'environnement d'installation. Cela a permis à un utilisateur non authentifié d'utiliser l'environnement d'installation non authentifié...

Security Bulletin: IBM® Data Server driver for JDBC and SQLJ could allow an evil server to perform an arbitrary file write on the connected client due to improper validation of file paths (CVE-2026-15955)

Summary IBM® Data Server driver for JDBC and SQLJ could allow an evil Db2 server to perform an arbitrary file write on the connected client due to improper validation of file paths. This vulnerability also applies to Db2 due to bundled JDBC and SQLJ components. Vulnerability Details...

CVE-2021-40870

CVE-2021-40870 Exploitation An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal. Modules need to Install...

CVE-2026-57145

PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter directly to open for reading and writing without traversal rejection, symlink resolution, a workspace boundary, or protected-path checks...

CVE-2026-57119

PraisonAI is a multi-agent teams system. Prior to 4.6.59, the unauthenticated Jobs API accepts an absolute or traversing agentfile path in POST /api/v1/runs and passes it to the job executor without a workspace allowlist or boundary check. A remote caller can cause the server to open files...