n8n-cve-2026-21858

n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — exploit n8n da lettura file non autenticata a RCE...

GitLabSniper

GitLabSniper CVE-2026-85706 — lettura arbitraria di file non autenticata in GitLab CE/EE rilevamento · enumerazione progetti pubblici · loot · shell interattiva · pipeline subfinder/httpx Autore: Yunus Emre Öztaş mitsec X: x.com/ynsmroztas GitHub: github.com/ynsmroztas Sito: ynsmroztas.github.io...

CVE-2026-23751-poc

CVE-2026-23751-PoC Proof-of-concept implementation of the .NET HTTP Remoting technique described in Code White's NewRemotingTricks, targeting Tungsten Automation Kofax Capture. CVE-2026-23751 Title: Tungsten Automation Kofax Capture Unauthenticated File Read/Write and Command Execution via .NET...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilità di Path Traversal in Zimbra 📋 Panoramica CVE-2025-68645 è una vulnerabilità di path traversal in Zimbra Collaboration Suite che consente ad attacker non autenticati di leggere file arbitrari dal filesystem del server. Endpoint Vulnerabile...

CVE-2024-24919-PoC

CVE-2024-24919-PoC Riferimenti della vulnerabilità https://nvd.nist.gov/vuln/detail/CVE-2024-24919 https://censys.com/cve-2024-24919/ https://vulners.com/cve/CVE-2024-24919 https://support.checkpoint.com/results/sk/sk182336 Hotfix Informazioni su CVE-2024-24919 La vulnerabilità consente a un...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest-Werkzeuge — /network Repository für Skripte zur Netzwerkauditierung und Penetrationstests. Nur auf Geräten mit formeller Autorisierung verwenden. CVE-2018-14847 — MikroTik Winbox Credential Extractor Beschreibung Nutzt die Schwachstelle zum nicht authentifizierten Auslesen von Dateien im...

CVE-2020-3452

CVE-2020-3452 Lettura di file non autenticata in Cisco ASA e Cisco Firepower Saikat Karmakar | Nov : 2021 Questo testerà se l'host specificato è vulnerabile a CVE 2020-3452 o meno Requisiti: requests termcolor Utilizzo: darklord@kali: python3 cve-2020-3452.py -h usage: cve-2020-3452.py -h -u U -f...

ALSA-2026:72424 Important: resteasy security update

RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified and portable implementation of the JAX-RS specification. Security Fixes: resteasy-core: RESTeasy SourceProvider remote unauthenticated file read...

CVE-2026-14323

The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is affected by a Directory Traversal vulnerability (all versions up to and including 2.8.5 ) via the 'mockups' parameter, allowing unauthenticated attackers to read arbitrary files on the server containing sensitive ...

Exploit for Path Traversal in Gitlab

CVE‑2026‑85706 – GitLab Unauthenticated F...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.7 Security Update

New Red Hat build of Keycloak 26.6.7 packages are available from the Customer Portal Red Hat build of Keycloak 26.6.7 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

CVE-2026-61560

@zereight/mcp-gitlab is a Model Context Protocol (MCP) server for GitLab. Prior to version 2.1.27 , when the SSE transport mode is enabled (SSE=true), all MCP tools are exposed without authentication. The upload_markdown tool reads arbitrary files from the server's local filesystem via an unsanit...

PT-2026-93172

Name of the Vulnerable Software and Affected Versions @zereight/mcp-gitlab versions prior to 2.1.27 Description When the SSE transport mode is enabled via SSE=true, all Model Context Protocol MCP tools are exposed without authentication. This is the default configuration for Docker deployments. A...

CVE-2026-54629

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules such as csvreader and logreader through its MySQL-compatible server port without authentication, authorization, or directory restrictions. A remote attacker can...

Vulnerability handling is handled differently in GitLab Community and Enterprise editions.

GitLab has identified a vulnerability in both the Community and Enterprise editions of the platform. The vulnerability resides in the repository commit API, where path traversal is possible. As a result, unauthenticated users can read arbitrary files on the system. The root cause of the...

Exploit for CVE-2026-85706

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated a...

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 CVSS score: 10.0, a path traversal issue in the repository commits AP...

CVE-2026-89013

Dolibarr 23.0.4 through 24.0.0 contains an authorization bypass in htdocs/document.php and htdocs/viewimage.php that allows unauthenticated attackers to read arbitrary files within the application's managed directories. The root cause is a regression (commit 5028dae981e, shipped in 23.0.4): suppl...

CVE-2026-89250

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FLV files from the temporary directory. Attackers can request the endpoint with a known or guessed stream key to downlo...

EUVD-2026-76062

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an unauthenticated file read vulnerability in the getRecordedFile.php endpoint that streams recorded FLV files from the temporary directory. Attackers can request the endpoint with a known or guessed stream key to downlo...