CVE-2025-46822

CVE-2025-46822 인증되지 않은 절대 경로를 통한 임의 파일 읽기 설명: Path.resolve 메서드가 경로 탐색을 방지하기 위해 사용되고 있지만, 절대 경로를 사용하면 내부 파일을 성공적으로 읽을 수 있음을 발견했습니다. 또한 엔드포인트가 인증되지 않았으므로 누구나 조직의 전체 파일, 파일 시스템을 읽을 수 있습니다. 이는 application-dev.properties에 구성된 저장소 루트files.store.root = /file-store/에서의 접근을 허용하여 민감한 내부 파일에 대한 무단 접근을 가능하게...

LOLLMS WebUI - Absolute Path Traversal

An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the openfile endpoint of lollmsadvanced.py. The sanitizepath function with allowabsolutepath=True allows an attacker to access arbitrary files and directories on a Windows system. This vulnerability can...

Gradio - Absolute Path Traversal

Gradio 6.7 on Windows with Python 3.13+ contains an absolute path traversal caused by incorrect path validation in path joining logic, letting unauthenticated attackers read arbitrary files from the server. id: CVE-2026-28414 info: name: Gradio - Absolute Path Traversal author: 0xAkoko severity:...

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

CVE-2020-13941

CVE-2020-13941: Windows 환경에서 UNC 경로를 남용하여 Apache Solr 공격 여러 Solr 엔드포인트가 절대 경로를 허용하는 것으로 확인되었습니다. Windows 시스템에서는 이러한 절대 경로를 이용해 OS가 공격자가 제어하는 SMB 서버에 연결하도록 강제할 수 있습니다. 이러한 동작은 다음과 같은 공격으로 이어질 수 있습니다: NTLM 해시를 캡처한 후 로컬에서 크랙킹 다른 SMB 서버에 인증하는 데 사용할 수 있는 SMB 릴레이 공격 참고: CVE 범위에는 포함되지 않지만, 인증 후 이 동작은 악성...

CVE-2021-43798-Exploit-for-Windows-and-Linux

CVE-2021-43798-Windows 및 Linux용 익스플로잇 CVE-2021-43798에 대한 수정된 익스플로잇입니다. Original exploit code: https://www.exploit-db.com/exploits/50581 변경 사항: 이 수정된 버전은 Windows 및 Linux 기본 서버 모두와 호환됩니다. 사용자가 절대 경로예: C:\Windows\System32\drivers\etc\hosts를 입력하면, 이 프로그램은 경로를 상대 경로Windows\System32\drivers\etc\hosts로...

Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six

CVE-2025-64512 — pdfminer.six RCE exploit Python 3, stdlib...

rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options

A flaw was found in rsync. A remote attacker can exploit this vulnerability by specifying an absolute path using the --temp-dir or --link-dest options. This bypasses the rename-confinement logic, allowing the attacker to write files to arbitrary locations outside the intended destination tree,...

Astra Linux – Vulnerability in ARK

The libarchiveplugin.cpp file in the KDE archive prior to version 24.12.0 can extract to an absolute path from an archive...

Astra Linux – Vulnerability in Ansible

There exists an absolute path traversal attack within the Ansible automation platform. This flaw allows an attacker to create a malicious Ansible role and have the victim execute that role. A symbolic link can be used to overwrite a file that is outside of the extraction path...

CVE-2025-70820

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

EUVD-2025-210899

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

CVE-2025-70820: Absolute Path Traversal

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

CVE-2025-70820

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder...

CVE-2025-70820

Zettlab D6 Ultra (a NAS device) prior to firmware 1.7.0 is affected by an absolute path traversal vulnerability that allows an attacker with low privileges on an adjacent network to reach folders outside the user's personal folder, resulting in low confidentiality impact (CVSS 3.5, LOW). The reme...

PT-2026-90948

Name of the Vulnerable Software and Affected Versions Zettlab D6 Ultra versions prior to 1.7.0 Description An absolute path traversal issue exists, allowing access to directories outside of the designated personal folder. Recommendations Update Zettlab D6 Ultra to version 1.7.0 or later...

EUVD-2026-75770

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82092

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-81554

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-45767

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some...