7091 matches found
CVE-2022-44900-demo-lab
CVE-2022-44900 Демо-лаборатория Демо-веб-приложение, уязвимое к CVE-2022-44900. CVE-2022-44900 — это уязвимость обхода каталога в функции SevenZipFile.extractall библиотеки Python py7zr версии 0.20.0 и более ранних, которая позволяет злоумышленникам читать и записывать произвольные файлы на...
pipe-primitive
pipe-primitive Эксплуатационный примитив в ядре Linux, вдохновлённый DirtyPipe CVE-2022-0847. На днях я, как и многие уважаемые коллеги по безопасности, изучил и воспроизвёл уязвимость DirtyPipe CVE-2022-0847 и глубоко прочувствовал, насколько она удобна. Эта уязвимость начинается с...
CVE-2026-49049
CVE-2026-49049 이 저장소는 Joomla Helix3 컴포넌트의 취약점에 대한 Python 기반 스캐너와 개념 증명proof-of-concept을 포함하고 있습니다. 이 버그는 공격자가 웹에서 접근 가능한 위치에 PHP 페이로드를 작성할 수 있을 때 원격 코드 실행RCE으로 이어질 수 있는 임의 파일 쓰기arbitrary file write 문제입니다. 버그의 정체 취약한 동작은 요청 파라미터가 적절한 검증 없이 파일 경로나 파일 내용을 제어하는 데 사용될 때 발생합니다. Helix3 AJAX 인터페이스의 경우,...
CVE-2024-25641-Exploit-for-Cacti-1.2.26
CVE-2024-25641 Cacti 1.2.26 Exploit Cacti 1.2.26에서 CVE-2024-25641을 악용합니다. 인증된 사용자가 임의 파일 쓰기 취약점을 통해 원격 코드 실행RCE을 달성할 수 있습니다. 개요 이 스크립트는 Cacti 1.2.26 에서 CVE-2024-25641 을 악용하는 과정을 자동화합니다. 이 취약점은 Import Templates 권한을 가진 인증된 사용자가 Package Import 기능을 통해 원격 코드 실행RCE 을 달성할 수 있게 합니다. 📌 원본 권고: GitHub...
CVE-2018-14847-EXPLOIT
CVE-2018-14847 - Чтение файлов MikroTik WinBox 💥 MikroTik RouterOS до версии 6.42 включительно подвержен уязвимости обхода каталогов в интерфейсе WinBox, что позволяет неаутентифицированным удаленным атакующим читать произвольные файлы, а аутентифицированным удаленным атакующим записывать...
CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC
CVE-2026-XXXXX 대기 중: Flask-Uploads의 경로 순회 취약점 정보 제품 : Flask-Uploads 버전 : 0.2.1 및 이전 버전 가능 취약점 유형 : 경로 순회 디렉토리 순회 CWE-ID : CWE-22 심각도 : 높음 CVSS 7.5 영향 : 임의 파일 쓰기, 원격 코드 실행 RCE 설명 Flask-Uploads 0.2.1 버전에는 치명적인 경로 순회 취약점이 존재합니다. 이 라이브러리는 업로드된 파일의 파일명을 파일시스템에 저장하기 전에 제대로 검증새니타이즈하지 못합니다. 구체적으로,...
EUVD-2026-76787
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS...
EUVD-2026-76748
An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...
CVE-2026-90445
An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...
CVE-2026-90445
An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...
CVE-2026-90445
CVE-2026-90445 is a path traversal vulnerability in an interface that accepts file uploads from authenticated users . The root cause is that uploaded archives are extracted without validating that file paths remain within the intended destination directory, allowing an attacker to write files to ...
CVE-2026-90445
An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an authenticated attacker to craft an archive whose entries traverse outside the...
CVE-2026-89009
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the syncserver daemon on TCP port 13136. The daemon, which runs...
CVE-2026-87984
An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to wri...
CVE-2026-89009 WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the syncserver daemon on TCP port 13136. The daemon, which runs...
EUVD-2026-76129
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the syncserver daemon on TCP port 13136. The daemon, which runs...
CVE-2026-89009
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 are affected by an unauthenticated arbitrary file write vulnerability in the sync_server daemon listening on TCP port 13136 . The daemon runs as root without authentication and accepts a 100-byte filename field in its pro...
EUVD-2026-76119
An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to wri...
CVE-2026-87984
Mistral Vibe , introduced in version 1.3.4 , contains an arbitrary file write vulnerability. The root cause is that shell redirection destinations are omitted from permission checks , allowing otherwise allowlisted commands to create or overwrite files at arbitrary paths accessible to the Vibe pr...
CVE-2026-87984
An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outside the active workspace without user approval. Shell redirection destinations are omitted from permission checks, enabling otherwise allowlisted commands to wri...