Lucene search
+L

7 matches found

Kitploit
Kitploit
•added 2026/10/01 2:18 p.m.•15 views

CVE-2023-36319

CVE-2023-36319 By modifying the compression plug-in command, the attacker can cause the server to execute arbitrary commands during the upload process. Only used for authorized security testing, please do not use it for illegal purposes. Violations have nothing to do with the author. Affected...

8.8CVSS8.2AI score0.02014EPSS
SaveExploits1
NVD
NVD
•added 2026/06/25 3:16 a.m.•30 views

CVE-2026-8662

Path Traversal vulnerability in the createarchive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker...

4.3CVSS0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/25 1:51 a.m.•51 views

CVE-2026-8662

CVE-2026-8662 describes a path traversal in the Rapid7 InsightConnect Compression Plugin for Linux, specifically in the create_archive function. An authenticated attacker can craft a filename input that writes to unintended file paths, with the impact limited to file corruption because content ca...

4.3CVSS6AI score0.00295EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/25 1:51 a.m.•12 views

CVE-2026-8662 Path Traversal in Rapid7 InsightConnect Compression Plugin

Path Traversal vulnerability in the createarchive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker...

3.3CVSS6AI score0.00295EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/25 1:51 a.m.•14 views

CVE-2026-8662

Path Traversal vulnerability in the createarchive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker...

3.3CVSS5.9AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/25 12:00 a.m.•35 views

PT-2026-52189

Path Traversal vulnerability in the create archive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker...

3.3CVSS5.9AI score0.00295EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•4 views

CVE-2026-8662: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in the createarchive function of Rapid7 InsightConnect Compression Plugin on Linux allows authenticated attackers to write to unintended file paths via crafted filename input. The impact is limited to file corruption as content cannot be controlled by the attacker...

4.3CVSS6.1AI score0.00295EPSS
SaveExploits0References2
Rows per page
Query Builder