EUVD-2026-52281

Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server 目录遍历漏洞 Spring Cloud Config 2.1.x 系列早于 2.1.2、2.0.x 系列早于 2.0.4、1.4.x 系列早于 1.4.6 的版本，以及更早的不受支持版本，允许应用程序通过 spring-cloud-config-server 模块提供任意配置文件。恶意用户或攻击者可以利用特制的 URL 发起目录遍历攻击。 发现者：Vern [email protected] 安全公告 https://pivotal.io/security/cve-2019-3799...

CVE-2024-23334-PoC

CVE‑2024‑23334 パストラバーサル - PoC このスクリプトは、Hack The Box の Chemistry マシンにおける CVE‑2024‑23334 の悪用を自動化するために作成しました。 この脆弱性は、アプリケーションが followsymlinks=True で静的ファイルを配信するように構成されている場合、aiohttp バージョン ≥ 1.0.5 かつ 3.9.2 に影響し、リモートからのディレクトリトラバーサルやサーバー上の任意のファイルへの不正アクセスを可能にします。...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. id: CVE-2015-9406 info: name: mTheme Unus 2.3 - Directory Traversal...

ktor-cve-2023-45612-poc

Ktor XXE 脆弱性の概念実証 CVE-2023-45612 概要 影響: XXE 参照を含む巧妙に細工された XML DTD を介した任意のファイルへのアクセス。 根本原因: 安全でない XML ドキュメントパーサー。 このリポジトリには、XXE の影響を確認できるように外部エンティティを許可するよう構成された、脆弱性のある Ktor 2.3.4 アプリが含まれています。 説明 XML 外部エンティティインジェクション CVE-2023-45612 の概念実証用の、脆弱性のある Ktor v2.3.4 アプリケーションです。 CVE-2023-45612 は、2.3.5...

CVE-2026-76424

Cisco ISE REST API contains an arbitrary file access vulnerability caused by insufficient validation in file operations . An authenticated remote attacker holding valid administrative credentials can upload or copy files using a crafted path, allowing files to be placed at arbitrary locations on ...

CVE-2026-76424 Cisco ISE Arbitrary File Access Vulnerability

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php wfufiledownloader.php ファイルへのアクセス、 WordPress File Upload Solution の PoC、ソリューションの脆弱性が発生し、任意のファイルにアクセスして操作または修正できる。...

EUVD-2026-78167

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared base directory, bypassing the intended access...

CVE-2026-91144 ZFile through 5.0.5 Share Entry Filter Bypass via Download Endpoint

ZFile through 5.0.5 fails to validate requested file paths against a share link's allowed entries on the download endpoint. Attackers holding a share link can supply arbitrary file paths as query parameters to download any file under the shared base directory, bypassing the intended access...

CVE-2026-91144

ZFile through 5.0.5 suffers from a share entry filter bypass on its download endpoint. The application fails to validate requested file paths against a share link's allowed entries, allowing an attacker holding a valid share link to supply arbitrary file paths as query parameters and download any...

CVE-2026-84598

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files...

CVE-2026-84598

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files...

EUVD-2026-78001

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files...

CVE-2026-16335

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal vulnerability (CWE-22) that allows a remote authenticated attacker to read, write, or delete arbitrary files. The CVSS v3.1 score is 8.1 (HIGH) , with low attack complexity, low privileges required, and no scope change; impact ...

CVE-2026-65400

CVE-2026-65400 时隔许久，我们终于在 MacOS 上拿到一个 RCE。 最初由 @osxreverser 发现，后来由 bynar.io 进一步扩展。更多信息参见 https://blog.calif.io/p/no-country-for-old-passwords。 这主要源自 @panchocosil（嗯，其实是 Claude……）的工作，他发布了一个只读 PoC。而 @HORKimhab 的仓库看起来有点扯淡，尤其是那个 get-svn.sh 看起来像是在为后续的供应链攻击做铺垫。 不管怎样，我成功实现了写入，并由此实现了 RCE。 快速开始...

CVE-2026-57145

CVE-2026-57145 affects PraisonAI , an AI multi-agent framework. The multiedit tool in src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter directly to open() for reading and writing without path traversal rejection, symlink resolution, workspace boundary validat...

CVE-2026-57145 PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

PraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes the LLM-controlled filepath parameter directly to open for reading and writing without traversal rejection, symlink resolution, a workspace boundary, or protected-path checks...