CVE-2025-60012-POC

교육 및 보안 연구 목적으로만 사용하십시오. 귀하가 소유하지 않거나 테스트에 대한 명시적 서면 허가를 받지 않은 시스템에 사용하지 마십시오. →전체 면책 조항 CVE-2025-60012 — Apache Livy 무단 파일 접근 -yellow 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2025-60012 심각도| 중간 CVSS 6.3 영향을 받는 버전| Apache Livy 0.7.0-incubating, 0.8.0-incubating — Apache Spark 3.1 이상에 연결된 경우 수정 버전| Apache...

CVE-2025-29927-PoC

CVE-2025-29927 연구 및 안전한 테스트 프레임워크 이 저장소는 CVE-2025-29927과 관련된 연구 및 분석 을 포함합니다. 웹 애플리케이션에서 경로 탐색/미들웨어 구성 오류 취약점에 대한 안전하고 통제된 테스트 접근 방식을 보여줍니다. ⚠️ 중요: 이 저장소는 교육 목적으로만 제공됩니다. 명시적 허가 없이 어떤 시스템도 절대 대상으로 삼지 마십시오. 개요 CVE-2025-29927은 미들웨어 처리에서 발생하는 취약점으로, 잘못 구성된 경우 인증되지 않은 파일 접근을 초래할 수 있습니다. 이 저장소는 다음을...

CentOS Linux 6 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS6:CLSA-2026:1789029795)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1789029795 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Ghost-Path-Traversal-CVE-2023-32235-

Bug Bounty Report - Ghost Path Traversal CVE-2023-32235 Summary The Ghost application is vulnerable to a path traversal vulnerability, identified as CVE-2023-32235. This vulnerability allows an attacker to access sensitive files outside the intended directory by manipulating the "package.json" fi...

CVE-2026-93282

A flaw was found in the Linux kernel's ksmbd server. This flaw allows an authenticated remote user to bypass access controls and gain unauthorized file access. When calculating maximal access permissions, ksmbd improperly combines rights from every Access Control Entry ACE regardless of whether t...

CVE-2024-24919

Exploit for CVE-2024-24919 Description This Python script is an exploit for CVE-2024-24919, a CVE that hitted Check Point Products: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versions: R77.20 EOL, R77.30 EOL, R80.10 EOL, R80....

EUVD-2026-87727

SiYuan is a self-hosted personal knowledge management system. In versions 3.8.0 through 3.8.3, the MCP file tool's sensitive-path guard util.IsForbiddenAbsPath, invoked from resolvePath is applied only to the allowed root of recursive operations and not to each resolved descendant path — an...

CVE-2022-22828

CVE-2022-22828 Synametrics - SynaMan 버전 4.9 요약 Viden Labs는 Synametrics SynaMan에서 안전하지 않은 직접 객체 참조IDOR 취약점을 발견했습니다. 이 취약점은 4.9 및 이전 버전에 존재합니다. 이 취약점은 이후 5.0 버전에서 패치되었습니다. "안전하지 않은 직접 객체 참조IDOR는 애플리케이션이 사용자 제공 입력을 사용하여 객체에 직접 접근할 때 발생하는 액세스 제어 취약점 유형입니다." -...

CVE-2026-93353 copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that bypass the xvol volflag enforcement. The mkdir, rmdir, and...

EUVD-2026-85401

CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /filemanager/controller endpoint. An authenticated remote attacker with ownership of any configured domain can supply an arbitrary absolute or out-of-scope path in the fileName JSON property. Because...

rsync: rsync: Unauthorized File Access via Symlink Module Root

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks...

CVE-2026-81301 Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File.... It then supports query, openFile,...

CVE-2026-81301

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps a caller-controlled URI path directly to a filesystem path via new File(...), supporting query() , openFile() , and delete() ...

Improper Neutralization of Special Elements in Data Query Logic

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via improper neutralization of special elements in the GridFS process. An attacker can access unauthorized file content or delete all file chunks by injecting query operato...

CVE-2026-9225

IBM Langflow OSS 1.0.0 through 1.11.5 is affected by an authorization bypass (CWE-639) in the File/Read File component. When executing flows via the /api/v1/run/advanced/{flow_id} endpoint, component inputs can reference storage paths using arbitrary user or flow identifiers without verifying own...

CVE-2026-9225 Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

PT-2026-89547

Name of the Vulnerable Software and Affected Versions MongoDB Java Driver affected versions not specified Description Improper neutralization of special elements in the data query logic within the GridFS component allows a structured file identifier provided by a caller to be interpreted as a que...

CVE-2026-86422

A flaw was found in ImageMagick. This vulnerability, known as a time-of-check-time-of-use TOCTOU flaw, affects path policy enforcement on Windows. A local attacker can exploit this by manipulating symbolic links symlinks during the brief interval between when the system checks a file's permission...

PT-2026-88031

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...