n8n-cve-2026-21858

n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — Exploit de lectura de archivos no autenticada a RCE en n8n...

CVE-2026-67281

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...

CVE-2026-67281

MikroTik RouterOS WebFig is affected by an unauthenticated file-read vulnerability in the /jsproxy path. The root cause is a stale uninitialized principal pointer retained by a newly allocated session, which an attacker can exploit by preparing the allocator and supplying parent-directory compone...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Herramientas de Pentest — /red Repositorio de scripts para auditoría y pruebas de penetración en redes. Úselo únicamente en dispositivos con autorización formal. CVE-2018-14847 — Extractor de Credenciales de Winbox MikroTik Descripción Explota la vulnerabilidad de lectura de archivo no autenticad...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilidad de Path Traversal en Zimbra 📋 Resumen CVE-2025-68645 es una vulnerabilidad de path traversal en Zimbra Collaboration Suite que permite a atacantes no autenticados leer archivos arbitrarios del sistema de archivos del servidor. Endpoint Vulnerable...

CVE-2026-23751-poc

CVE-2026-23751-PoC Proof-of-concept implementation of the .NET HTTP Remoting technique described in Code White's NewRemotingTricks, targeting Tungsten Automation Kofax Capture. CVE-2026-23751 Title: Tungsten Automation Kofax Capture Unauthenticated File Read/Write and Command Execution via .NET...

resteasy-core: RESTeasy SourceProvider remote unauthenticated file read

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

Linux Distros Unpatched Vulnerability : CVE-2026-73270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected...

AZL-98484 CVE-2026-73270 affecting package erlang 26.2.5.21-4

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by requesting them with different casing, on deployments whose filesystem is case-insensitive. modauth:secretpath/3 decides...

AZL-98463 CVE-2026-66835 affecting package erlang 26.2.5.21-4

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by prefixing the request path with an extra slash. httpdrequest:validateuri/1 normalises the request URI with uristring:normalize/1, which performs...

CVE-2026-66835

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by prefixing the request path with an extra slash. httpdrequest:validateuri/1 normalises the request URI with uristring:normalize/1, which performs...

EUVD-2026-69245

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by prefixing the request path with an extra slash. httpdrequest:validateuri/1 normalises the request URI with uristring:normalize/1, which performs...

CVE-2026-66835

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by prefixing the request path with an extra slash. httpdrequest:validateuri/1 normalises the request URI with uristring:normalize/1, which performs...

CVE-2026-66835

A Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a mod_auth protected directory by prefixing the request path with an extra (doubled) slash. The root cause is that uri_string:normalize/1 performs RFC 3986 dot-segment removal ...

EUVD-2026-69243

Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by requesting them with different casing, on deployments whose filesystem is case-insensitive. modauth:secretpath/3 decides...

CVE-2026-17615 Resteasy-core: resteasy sourceprovider remote unauthenticated file read

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2024-24919-PoC

CVE-2024-24919-PoC Referencias de la Vulnerabilidad https://nvd.nist.gov/vuln/detail/CVE-2024-24919 https://censys.com/cve-2024-24919/ https://vulners.com/cve/CVE-2024-24919 https://support.checkpoint.com/results/sk/sk182336 Hotfix Acerca de CVE-2024-24919 La vulnerabilidad permite que un atacant...

CVE-2026-70449

Apache Wicket (versions ≤ 8.18.0, ≤ 9.23.0, ≤ 10.10.0) is vulnerable to a path traversal via improper validation of package resource URL attributes (locale, style, variation). These attributes are spliced into the resource lookup path without checking for path separators, allowing an unauthentica...

EUVD-2026-68290

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send...

CVE-2020-3452

CVE-2020-3452 未经身份验证的文件读取漏洞 in Cisco ASA & Cisco Firepower Saikat Karmakar | 2021年11月 此脚本将测试给定主机是否存在CVE-2020-3452漏洞 要求： root@kitploit: requests termcolor 用法： root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage: cve-2020-3452.py -h -u U -f F CVE-2020-3452 Vulnerability Test optional...