CVE-2026-102627

The IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 are vulnerable to a Zip Slip path traversal vulnerability (CWE-22 ). A remote authenticated attacker could exploit improper validation of file paths during archive extraction to achieve arbitrary code execution . The vulnerability ...

CVE-2021-43798

CVE-2021-43798 ┌─✗─s1gh@parrot─/Desktop └──╼ $ python3 grafanapathtraversal.py -H "http://example-url:3000" Read file /etc/passwd root:x:0:0:root:/root:/bin/ash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin...

csv-plus_vulnerability

csv-plusvulnerability 👻 2-Click Arbitrary Code Execution Vulnerability. CVE-2022-21241 ⚠ This PoC was created to alert users and investigate vulnerabilities in their own CSV+, and is prohibited to be used for attacks. Vulnerability The following versions are vulnerable. CSV+ click me 👻...

CVE-2025-43919-POC

🚨 CVE-2025-43919: Directory Traversal in GNU Mailman 2.1.39 cPanel/WHM A new vulnerability has been discovered in GNU Mailman 2.1.39, bundled with cPanel/WHM, allowing unauthenticated remote attackers to read arbitrary files on the server via a directory traversal flaw. 📌 Vulnerability Summary:...

CVE-2026-75063 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding...

CVE-2026-75063

The Planning Analytics Workspace component of IBM Planning Analytics Local versions 2.0 and 2.1 is susceptible to a Cross-Site Scripting (XSS) vulnerability (CWE-79 ). This is caused by improper output encoding , which could allow a remote authenticated attacker to execute arbitrary JavaScript. T...

CVE-2026-75061 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...

CVE-2026-75061

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a path traversal flaw. A remote attacker can exploit this by sending a specially crafted URL request containing "dot dot" sequences (/../) to bypass directory restrictions. This allows the attacker to write arbitrary files on the syste...

CVE-2026-19627 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths...

CVE-2026-19627

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a security flaw caused by improper validation of file paths . This allows a remote attacker to read arbitrary host files and overwrite certain application files . The vulnerability is associated with CWE-22 (Path Traversal). No specifi...

CVE-2024-6387

0. TL;DR This is essentially a statistical vulnerability: it requires a large number of attempts to win the race condition and successfully execute arbitrary code. Attackers need to overcome many obstacles, "Schwartz told SecurityWeek." Even in the best case, the most well-known vulnerabilities...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - Missing Authorization to Arbitrary Options Update Description The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized modification of data...

CVE-2024-24576.jl

CVE-2024-24576 PoC in Julia λ julia main.jl Enter arguments: hello Output: Argument received: hello λ julia main.jl Enter arguments: hello & whoami Output: Argument received: "hello & whoami" λ julia main.jl Enter arguments: hello" & whoami Output: Argument received: "hello" desktop-9zk7mal\lpn...

CVE-2024-36401

CVE-2024-36401 GeoServer Exploitation Tool Vulnerability Overview CVE-2024-36401 is a remote command execution vulnerability in GeoServer. An attacker can execute arbitrary commands without authorization by crafting a specific WFS Web Feature Service request. Requirements Python 3.x Install...

CVE-2023-50071

CVE-2023-50071 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - savedepartment Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL comman...

Important: Red Hat Security Advisory: pcre2 security update

An update for pcre2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions

A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...

CVE-2026-82110 DataStage on Cloud Pak for Data Path Traversal

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal...

CVE-2026-82110

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a path traversal flaw due to improper validation of pathname. This vulnerability could allow a remote authenticated attacker to execute arbitrary code . The impact is categorized as CRITICAL with high integrity and availability impacts....

CVE-2026-82096 DataStage on Cloud Pak for Data Command Injection

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...