GHSA-VHHQ-M2GM-RWC9 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

Summary During an SSG build, page definitions returned by getSsgPages can provide custom dir and filename values. The builder joined those values to build.distDir and wrote the generated page without verifying that the final destination remained inside the distribution directory. Details A page...

EUVD-2026-93568

Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile...

CVE-2026-101886

Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 are vulnerable to a path traversal vulnerability. The flaw exists because the exported crosslaunch.share activity uses an unsanitized display name from a ContentProvider during file path construction. A malicious application ...

CVE-2022-26923-Powershell-POC

CVE-2022-26923-Powershell-POC هذا اختبار إثبات مفهوم باستخدام باورشيل لتحميل وتشغيل Certify و Rubeus تلقائيًا من الذاكرة. كيف يعمل؟ 1. يقوم بتحميل Certify.exe و Rubeus.exe في الذاكرة. 2. يقوم بمسح الجهاز المستهدف بحثًا عن قوالب الشهادات الخاطئة. المزيد على...

CVE-2024-24409

CVE-2024-24409 - ADManager Plus Build 7210 विशेषाधिकार उन्नयन भेद्यता विवरण Modify Computers, ADManager में कंप्यूटर प्रबंधन के लिए एक पूर्वनिर्धारित भूमिका है। यदि किसी तकनीशियन उपयोगकर्ता के पास किसी कंप्यूटर पर Modify Computers विशेषाधिकार है, तो वे कंप्यूटर ऑब्जेक्ट के userAccountControl और...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - اجتياز الدليل في Cisco ASA و Cisco Firepower Threat Defense هذه الأداة مصنوعة لأغراض تعليمية واختبار أخلاقي فقط. استخدام هذا السكربت لمهاجمة الأهداف دون موافقة متبادلة مسبقة يعد غير قانوني. تقع مسؤولية الالتزام بجميع القوانين المحلية والولائية والاتحادية المعمول بها...

CVE-2026-20896

प्रूफ ऑफ कॉन्सेप्ट कोड CVE-2026-20896 यह स्क्रिप्ट Gitea API के रूट वैलिडेशन में तार्किक दोष का शोषण स्वचालित करती है, जिससे प्राधिकरण हेडर में डायरेक्टरी ट्रैवर्सल हमले के माध्यम से सर्वर को एक मान्य प्रशासनिक टोकन प्रदान करने के लिए मजबूर किया जा सकता है। !/usr/bin/env python3 PoC: Gitea...

PoC-CVE-2025-13780

لا يحتوي هذا المستودع على ملف README...

BIT-JOOMLA-2026-90915 Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...

CVE-2026-42720

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720 WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720 WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

EUVD-2026-94263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720

The Dynamic User Directory WordPress plugin (versions up to and including 2.4 ) is vulnerable to a Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker to execute unauthorized database queries. No specific remediation...

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Dynamic User Directory versions = 2.4...

wargame-tarpioka

BubbleTea CVE-2007-4559 ثغرة تصفح الدلائل باستخدام “.tar” للوصول إلى ../../flag المسار BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py تعليمات البناء الحالية فحص docker docker ps docker images docker build -t tarpioka docker run -...

CVE-2026-5703

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...

Final-Proj

لا يحتوي هذا المستودع على ملف README...

CVE-2026-103870

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...

EUVD-2026-94172

A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...