CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE dovuto a un controllo di accesso errato nelle azioni AJAX Descrizione La versione Pro di questo plugin registra diverse azioni AJAX che chiamano funzioni prive di controlli di capacità e nonce, in particolare le funzioni ‘ajaxget...

CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

DEBIAN-CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

CVE-2026-72696

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

CVE-2026-72695

Grav before 2.0.16 contains a path traversal vulnerability in MediaUploadTrait::deleteFile that allows authenticated users with media management permissions to delete arbitrary files by supplying filenames with directory traversal sequences. The method validates only the basename portion of the...

CVE-2019-16278

CVE-2019-16278 Uno script Python semplice e veloce per sfruttare la CVE-2019-16278 Nostromo 1.9.6 a partire da una vulnerabilità di Directory Traversal nella funzione httpverify di Nostromo nhttpd che porta a un RCE non autenticato tramite una richiesta HTTP realizzata appositamente. Accetta solo...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

CVE-2026-78677 GitPython before 3.1.59 Path Traversal via separate-git-dir

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

EUVD-2026-65223

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

CVE-2026-78677

GitPython before 3.1.59 omits the --separate-git-dir option from its unsafe_git_clone_options list, enabling a path traversal attack. An attacker can pass a separate_git_dir parameter to Repo.clone_from() or Repo.clone() to redirect repository metadata to an attacker-controlled filesystem path, r...

CVE-2026-78677 GitPython before 3.1.59 Path Traversal via separate-git-dir

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

CVE-2026-78677

GitPython before 3.1.59 omits --separate-git-dir from unsafegitcloneoptions, allowing attackers to create arbitrary git directories outside the intended clone destination. Attackers can pass a separategitdir parameter to Repo.clonefrom or Repo.clone to redirect repository metadata to an...

EUVD-2026-65210

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

EUVD-2026-65209

Grav before 2.0.16 contains a path traversal vulnerability in MediaUploadTrait::deleteFile that allows authenticated users with media management permissions to delete arbitrary files by supplying filenames with directory traversal sequences. The method validates only the basename portion of the...

CVE-2002-0740

CVE-2002-0740 Vulnerabilità di buffer overflow nel parametro della riga di comando della directory spool di SLRNPull Pubblicazione Packetstorm su https://packetstormsecurity.com/files/25989/slrnpull.overflow.txt.html Pubblicazione Securiteam su http://www.securiteam.com/unixfocus/5FP0R0K6UC.html...

CVE-2002-0347

CVE-2002-0347 ثغرة اجتياز الدليل في Cobalt RAQ 4 تسمح للمهاجمين عن بُعد بقراءة الملفات المحمية بكلمة مرور، وربما الملفات خارج جذر الويب، عبر .. نقطتان في طلب HTTP. منشور Packetstorm على https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html منشور SecurityFocus على...

CVE-2001-0931

CVE-2001-0931 La vulnerabilità di directory traversal in Cooolsoft PowerFTP Server 2.03 consente agli attaccanti di elencare o leggere file e directory arbitrari tramite .. dot dot in 1 LS o 2 GET. Pubblicazione SecurityFocus su https://www.securityfocus.com/bid/3593/info Pubblicazione Securiteam...

CVE-2001-0758

CVE-2001-0758 Vulnerabilità di directory traversal in Shambala 4.5 Pubblicazione Packetstorm all'indirizzo https://dl.packetstormsecurity.net/0106-exploits/alt3kx-advisories-2001.txt Pubblicazione Securiteam all'indirizzo http://www.securiteam.com/windowsntfocus/5SP011P4KC.html Autore Alex...

CVE-2001-0680

CVE-2001-0680 QPC QVT/Net 4.0 और AVT/Term 5.0 में ftpd में डायरेक्टरी ट्रैवर्सल भेद्यता Packetstorm प्रकाशन: https://packetstormsecurity.com/files/24931/alt3kx-advisories-2001.txt.html Securiteam प्रकाशन: http://www.securiteam.com/windowsntfocus/5IP0G2040Q.html लेखक Alex Hernandez उर्फ @alt3kx...