CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

EUVD-2026-77248

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-82765

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-82765

CVE-2026-82765 is a path traversal vulnerability in Contec FX5000, FX4000, and FX3000 series devices. An attacker with FTP access to the affected product can view and/or alter arbitrary files on the server, resulting in high confidentiality and integrity impact with no availability impact. The CN...

EUVD-2026-77244

A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the file hexstrikeserver.py of the component API Files Endpoint. The manipulation of the argument filename leads to path...

CVE-2026-90691

0x4m4 HexStrike AI is affected by a path traversal vulnerability in the FileOperationsManager function within hexstrike_server.py (component: API Files Endpoint). Manipulating the filename argument allows a remote, unauthenticated attacker to traverse file paths, with CVSS 3.1 score 8.3 (HIGH) du...

CVE-2026-90691 0x4m4 HexStrike AI API Files Endpoint hexstrike_server.py FileOperationsManager path traversal

A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the file hexstrikeserver.py of the component API Files Endpoint. The manipulation of the argument filename leads to path...

CVE-2026-82768

A path traversal vulnerability in SGA1000 (manufactured by Contec ) allows an attacker with FTP access to view and/or alter arbitrary files on the server, potentially leading to high confidentiality and integrity compromise with no availability impact . The vulnerability is scored CVSS 3.1: 8.1 (...

CVE-2026-82768

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

EUVD-2026-77222

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2023-45858

A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files...

CVE-2023-40772

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC This repository contains a benign proof of concept for CVE-2026-36227, a path traversal issue in Easy Chat Server 3.1 user registration handling. This repository is for authorized security research and local reproduction only. Do no...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Explotación Masiva para Fortinet FortiOS SSL VPN Una herramienta para la explotación masiva de la vulnerabilidad CVE-2018-13379 path traversal en Fortinet FortiOS SSL VPN. Permite leer archivos de sesión y extraer inicios de sesión y contraseñas en texto claro. Características...

cve-2024-38819-lab

CVE-2024-38819 Customer Vault Lab This is a Cloud Foundry-ready Spring Boot demo for CVE-2024-38819, a Spring Framework path traversal vulnerability in functional static resource handling. What Is Patched? CVE-2024-38819 is patched in Spring Framework , not directly in Spring Boot. Spring Boot is...

CVE-2025-8088-Winrar

CVE-2025-8088 Explotación WinRAR Herramienta avanzada de explotación transversal de ruta de WinRAR Una sofisticada herramienta GUI para crear archivos RAR maliciosos que explotan la vulnerabilidad de recorrido de ruta de WinRAR CVE-2025-8088 mediante la manipulación de encabezados ADS y RAR5...

CVE-2026-5203

CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Subida Arbitraria de Archivos Resumen La funcionalidad de importación XML del módulo UserGuide en CMS Made Simple ≤ 2.2.22 no sanitiza los nombres de archivo proporcionados por el usuario, lo que permite a un administrador autenticado...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal y Escritura Arbitraria de Archivos Autenticado Este repositorio contiene una prueba de concepto PoC para el exploit CVE-2026-6815, una vulnerabilidad de escritura arbitraria de archivos y path traversal en Casdoor. La vulnerabilidad ha sido...