dotdotslash

dotdotslash Uno strumento per aiutarti a cercare vulnerabilità di Directory Traversal Benchmark Piattaforme che ho testato per validare l'efficienza dello strumento: DVWA low/medium/high bWAPP low/medium/high Screenshot Installazione Puoi scaricare l'ultima versione clonando questo repository...

Node.js <8.6.0 - Directory Traversal

Node.js before 8.6.0 allows remote attackers to access unintended files because a change to ".." handling is incompatible with the pathname validation used by unspecified community modules. id: CVE-2017-14849 info: name: Node.js 8.6.0 - Directory Traversal author: RandomRobbie severity: high...

TIBCO JasperReports Library - Directory Traversal

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for...

Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit...

NetAlert X - Arbitary File Read

A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18 - v24.9.12. id: CVE-2024-48766 info: name: NetAlert X - Arbitary File Read author: s4e-io severity: critical description: | A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18...

Rubedo CMS <=3.4.0 - Directory Traversal

Rubedo CMS through 3.4.0 contains a directory traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI. id: CVE-2018-16836 info: name:...

CVE-2024-28995-SolarWinds-Serv-U

CVE-2024-28995-SolarWinds-Serv-U SolarWinds Serv-U File Server Serv-U ist ein Multiprotokoll-Dateiserver, der Dateien über verschiedene Wege von und zu anderen vernetzten Computern senden und empfangen kann. CVE-2024-28995 ist eine nicht authentifizierte Directory-Traversal-Schwachstelle in...

CVE-2021-43798

CVE-2021-43798 Directory Traversal e lettura arbitraria di file in Grafana Autori: Wagner Alves - Analista Red Team Questo exploit sfrutta le vulnerabilità di Directory Traversal e Arbitrary File Read in Grafana 8.0 - 8.3, consentendo di leggere file come /etc/passwd, /etc/hosts,...

cve-2019-19781

CVE-2019-19781 Dies wurde nur hochgeladen, weil andere Forscher ihren Code zuerst veröffentlicht haben. Wir hätten gehofft, dies noch etwas länger geheim zu halten, während die Verteidiger ausreichend Zeit hatten, ihre Systeme zu patchen. Wir sind ganz für verantwortungsvolle Offenlegung, in dies...

CVE-2024-4443-Poc

CVE-2024-4443-Poc CVE-2024-4443 Business Directory Plugin – Easy Listing Directories para WordPress execute \business-directory-plugin\includes\helpers\class-listing-search.php:88 WPBDPListingSearch-traversetree \business-directory-plugin\includes\helpers\class-listing-search.php:185...

CVE-2019-19781

Este artigo é sobre o CVE-2019-19781, a vulnerabilidade de execução remota de código RCE por Directory Traversal no Citrix ADC and Gateway. Esta vulnerabilidade de execução remota de código ocorre porque a validação do arquivo smb.conf em ../vpns, abaixo do caminho /vpn, não é feita adequadamente...

PT-2026-82216

Name of the Vulnerable Software and Affected Versions ZLMediaKit affected versions not specified Description The downloadFile API endpoint fails to properly validate directory boundaries when restricting file access to configured root directories. The system uses a prefix comparison that does not...

PT-2026-82231

Name of the Vulnerable Software and Affected Versions Spring Cloud Config versions 5.0.0 through 5.0.4 Spring Cloud Config versions 4.3.0 through 4.3.4 Spring Cloud Config versions 4.0.0 through 4.2.8 Spring Cloud Config versions 3.1.14 and earlier Description The base directory used by the Sprin...

Linux Distros Unpatched Vulnerability : CVE-2026-80535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't double-lock when deleting a self-referential directory LOLLM notices that the dirtree scrubber can detect a directory that refers to itself. In this...

CVE-2026-20896

Proof-of-Concept-Code CVE-2026-20896 Dieses Skript automatisiert die Ausnutzung des Logikfehlers in der Routenvalidierung der Gitea-API und ermöglicht es, den Server zu zwingen, einen gültigen administrativen Token durch einen Directory-Traversal-Angriff im Autorisierungsheader zu gewähren...

pywhisker

pyWhisker pyWhisker é um equivalente em Python do Whisker original, criado por Elad Shamir e escrito em C. Esta ferramenta permite que os usuários manipulem o atributo msDS-KeyCredentialLink de um usuário/computador alvo para obter controle total sobre esse objeto. Baseia-se no Impacket e em um...

ad-password-protection

Lithnet Password Protection per Active Directory LPP migliora le opzioni disponibili per un'organizzazione che desidera garantire che tutti i propri account Active Directory abbiano password forti. LPP è un modulo che si installa sui server Active Directory e utilizza un filtro password per...

reproduce-cve-2024-2887

Dieses Repository hat keine README-Datei...

CVE-2020-29666

CVE-2020-29666 Elenco delle directory Descrizione suggerita In Lan ATMService M3 ATM Monitoring System 6.1.0, a causa di una vulnerabilità di elenco delle directory, un attaccante remoto può visualizzare i file di log, situati in /websocket/logs/, che contengono i valori dei cookie di un utente e...

CVE-2025-13390

WP Directory Kit = 1.4.4 - Bypass de Autenticação para Escalação de Privilégios via Account Takeover Resumo O plugin WP Directory Kit para Wordpress versão 1.4.4 e anteriores contém um bypass de autenticação na sua funcionalidade de auto-login. A vulnerabilidade permite que atacantes não...