CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

CVE-2026-90932

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in core-upgrade backup handling. The CoreUpgradeController and BackupService concatenate a user-supplied backup_file/filename value directly onto the backup directory path without normalisation or path-containment c...

CVE-2026-90930

File Browser through version 2.63.23 is vulnerable to a path rule bypass via symbolic link resolution. The application applies access-control path rules to the requested lexical path but fails to reapply those rules after resolving symbolic links to their actual targets. This allows authenticated...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2026-90930 File Browser through 2.63.23 Path Traversal via Symlink Alias

File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - Lectura/Inclusión remota limitada de archivos Endpoints vulnerables: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

CVE-2020-12116

CVE-2020-12116 用于利用CVE-2020-12116的概念验证代码：对ManageEngine OpManager进行未认证的任意文件读取。 摘要 OpManager的最新版本包含一个目录遍历漏洞，允许无限制地访问OpManager应用程序中的每个文件。这包括私有SSH密钥、受密码保护的Java密钥库，以及包含密钥库密码、私有证书和后端数据库密码的配置文件。如果配置了LDAP，则可以从"conf/OpManager/ldap.conf"获取域凭据。 漏洞分析 向ManageEngine OpManager应用程序的根目录发送一个未认证的GET请求，默认端口为8060。...

Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation

Análisis de Incidente: Intento de Explotación de CVE-2024-24919 en Check Point Security Gateway 📌 Resumen Ejecutivo El 6 de junio de 2024, a las 03:12 PM, los sistemas de monitoreo de seguridad activaron una alerta por un intento de explotación de alta severidad dirigido a un Check Point Security...

CVE-2020-17519

Uso y Descargo de responsabilidad Este script es para la detección por lotes de la vulnerabilidad de recorrido de directorios de Apache Flink CVE-2020-17519. Uso: Python CVE-2020-17519.py urls.txt Cada URL en urls.txt es una línea, las direcciones vulnerables se guardan en vul.txt Versiones...

CVE-2022-27925

CVE-2022-27925 描述 2022年5月10日，Zimbra发布了9.0.0补丁24和8.8.15补丁31，以修复Zimbra Collaboration Suite中的多个漏洞，包括CVE-2022-27924（我们之前写过）和CVE-2022-27925。...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit Herramienta avanzada de explotación de path traversal en WinRAR Una sofisticada herramienta GUI para crear archivos RAR maliciosos que explotan la vulnerabilidad de path traversal en WinRAR CVE-2025-8088 mediante manipulación de ADS y cabeceras RAR5. Características...

CVE-2018-11235

Exploit PoC para CVE-2018-11235 GitHub no me permite subir un repositorio que explote la vulnerabilidad buen punto para ellos, así que tendrás que construirlo tú mismo ejecutando el script build.sh. Después, sube el repositorio a algún sitio. Cuando lo clones con la bandera --recurse-submodules, ...

Astra Linux – Vulnerability in unrar-nonfree

RARLAB’s UnRAR version prior to 6.12 on Linux and UNIX allowed directory traversal, enabling writing to files during an extraction operation also known as unpacking. This was demonstrated by creating a file named /.ssh/authorizedkeys. NOTE: WinRAR and Android RAR are not affected by this issue...

Astra Linux – Vulnerability in Python-Django

Django versions prior to 2.2.24, 3.x prior to 3.1.12, and 3.2.x prior to 3.2.4 have a potential issue with directory traversal through django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default...

Astra Linux – Vulnerability in python-setuptools

Setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability exists in Setuptools prior to version 78.1.1. An attacker could be allowed to write files to arbitrary locations on the file system with the permissions of...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fs/proc: taskmmu.c: Do not read mapcount for migration entries The syzbot reported the following bug: Kernel bug at include/linux/page-flags.h: 785 Invalid opcode: 0000 1 – PREEMPT SMP KASAN CPU: 1; PID: 4392; Comm:...

Astra Linux – Vulnerability in OpAM

In OCaml opam before version 2.5.1, a .install field containing a destination filepath can use ../ to access the parent directory...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have a flaw in the path traversal filter in channels/drive/client/drivefile.c. The containsDotDot function detects ../ and .. in the path, but misses .. when it’s the last component without a trailing...

Astra Linux – Vulnerability in Linux

In the drivers/target/targetcorexcopy.c file within the Linux kernel, prior to version 5.10.7, insufficient identifier checking in the LIO SCSI target code could be exploited by remote attackers to read or write files through directory traversal in an XCOPY request, known as CID-2896c93811e3. For...

Astra Linux – Vulnerability in Mako

Mako is a template library written in Python. Prior to version 1.3.11, the TemplateLookup.gettemplate function was vulnerable to path traversal attacks when the URI started with // e.g., //../../../secret.txt. The root cause of this issue was an inconsistency in the two implementations of slash...