CVE-2019-3799

CVE-2019-3799 - Обход каталога в Spring-Cloud-Config-Server Spring Cloud Config, версии 2.1.x до 2.1.2, версии 2.0.x до 2.0.4 и версии 1.4.x до 1.4.6, а также более старые неподдерживаемые версии позволяют приложениям обслуживать произвольные файлы конфигурации через модуль...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

mTheme Unus < 2.3 - Directory Traversal

The mTheme-Unus theme for WordPress, prior to version 2.3, contained a directory traversal flaw that let attackers access arbitrary files. This was possible by exploiting the files parameter in css/css.php with .. sequences. id: CVE-2015-9406 info: name: mTheme Unus 2.3 - Directory Traversal...

CVE-2026-40541

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...

CVE-2026-40541

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php wfufiledownloader.php फ़ाइल के माध्यम से पहुँच, WordPress File Upload Solution poc, समाधान में भेद्यता उत्पन्न होती है, मनमाने ढंग से फ़ाइलों तक पहुँचकर उन्हें हेरफेर या संशोधित किया जा सकता है...

PT-2026-82877

Name of the Vulnerable Software and Affected Versions Synology Chat Server versions prior to 2.4.5-22148 Description An improper neutralization of input during web page generation, known as Cross-site Scripting XSS, occurs in the extract domain component. This allows remote authenticated users,...

CVE-2026-54687

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

ulteriusExploit

ulteriusExploit Exploit Python per CVE-2017-16806 Exploit per directory traversal accesso arbitrario ai file in Ulterius Server 1.9.5.0 Di Rick Osgood CVE-2017-16806...

n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

GHSA-Q7M3-RHXG-7VXR n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

EUVD-2026-67158

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

ktor-cve-2023-45612-poc

Ktor XXE Vulnerability Proof-of-Concept CVE-2023-45612 Resumo Impacto: Acesso a arquivos arbitrários através de um DTD XML malicioso com referência XXE. Causa raiz: Analisador de documento XML inseguro. Este repositório contém uma aplicação Ktor 2.3.4 vulnerável configurada para permitir entidade...

cve-2024-38819

CVE-2024-38819 01. Panoramica di File-Traversal e WebFlux 1 Panoramica di File-Traversal e WebFlux La vulnerabilità File-Traversal path traversal è un tipo di attacco, identificato come CWE-22, che consente a un attaccante di aggirare i permessi del file system in un'applicazione web e accedere a...

CVE-2024-23334-PoC

CVE‑2024‑23334 Path Traversal - PoC Ho creato questo script per automatizzare lo sfruttamento della CVE‑2024‑23334 sulla macchina Hack The Box Chemistry. Questa vulnerabilità colpisce aiohttp versioni ≥ 1.0.5 e 3.9.2 quando l'applicazione è configurata per servire file statici con...

CVE-2026-48749

A flaw was found in Incus, a container and virtual machine manager. A crafted container image can use a symlink in the rootfs directory to read or write arbitrary files on the host, potentially leading to command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

CVE-2026-55609

sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the exportstate and importstate tools in src/consciousness-explorer/mcp/server.js pass the...

CVE-2026-76198

CAI Content Credentials (Adobe) is affected by an Improper Input Validation flaw (CWE-20) that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction — a victim must open a m...

CVE-2026-65400

CVE-2026-65400 Pela primeira vez em um bom tempo, temos um RCE no MacOS. Descoberto originalmente por @osxreverser, e posteriormente expandido por bynar.io. Veja https://blog.calif.io/p/no-country-for-old-passwords para mais informações. Isso é derivado principalmente do trabalho de @panchocosil...

CVE-2026-71932 DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...