CVE-2026-66906

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function, caused by insufficient validation of the option field. A remote attacker with valid administrative credentials for the device's web management interface can supply crafted input containi...

EUVD-2026-64991

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

CVE-2010-4231-EXPLOIT

CVE-2010-4231 - Vulnerabilità di Directory Traversal in Camtron e TecVoz IP Cameras CVE-2010-4231 è una vulnerabilità di directory traversal che esiste nell'interfaccia di amministrazione basata sul web della Camtron CMNC-200 Full HD IP Camera e della TecVoz CMNC-200 Megapixel IP Camera. La...

CVE-2024-23334-PoC

Path Traversal PoC CVE-2024-23334 यह स्क्रिप्ट CVE-2024-23334 भेद्यता के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC है, जो पथ ट्रैवर्सल से संबंधित है। स्क्रिप्ट HTTP अनुरोधों में पथों में हेरफेर करके अनुमत रूट निर्देशिका के बाहर की फ़ाइलों तक पहुँचने का प्रयास करती है। आवश्यकताएँ इस स्क्रिप्ट को चलाने के लिए,...

tmp: path Traversal via unsanitized prefix/postfix enables directory escape

A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...

tmp: path Traversal via unsanitized prefix/postfix enables directory escape

A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...

CVE-2024-34474

CVE-2024-34474 Clario fino al 2024-04-11 per Windows Desktop ha permessi deboli per %PROGRAMDATA%\Clario e tenta di caricare DLL da lì come SYSTEM. Descrizione: L'applicazione desktop Clario per Windows tenta di caricare librerie DLL inesistenti da C:\ProgramData\Clario\ e...

CVE-2024-28589

CVE-2024-28589 Una vulnerabilità è stata scoperta in Axigen Mail Server per Windows, che interessa tutte le versioni fino alla 10.5.18 e consente l'escalation locale dei privilegi. Descrizione: È stato riscontrato che Axigen Mail Server è vulnerabile a un'escalation locale dei privilegi a causa d...

CVE-2021-40870

CVE-2021-40870 Exploit Ein Problem wurde im Aviatrix Controller 6.x vor 6.5-1804.1922 entdeckt. Ein uneingeschränkter Upload einer Datei mit einem gefährlichen Typ ist möglich, was es einem nicht authentifizierten Benutzer ermöglicht, über einen Directory-Traversal-Angriff beliebigen Code...

EUVD-2026-64952

rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal sequences t...

CVE-2026-77914 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal...

CVE-2026-77914

rConfig versions prior to 8.2.13 contain a path traversal vulnerability in the export download endpoint . An authenticated attacker can manipulate the filename parameter with directory traversal sequences to escape the intended export directory and read arbitrary files accessible to the applicati...

CVE-2008-5862-EXPLOIT

CVE-2008-5862 - Vulnerabilità di directory traversal in webcamXP 5.3.2.375 e 5.3.2.410 Questo repository contiene un exploit per CVE-2008-5862, una vulnerabilità di sicurezza scoperta nelle versioni 5.3.2.375 e 5.3.2.410 build 2132 di webcamXP. L'exploit sfrutta una falla di directory traversal,...

Wordpress-CVE-2020-35749

Vulnerabilidade LFI no Plugin WordPress Simple Job Board 2.9.3 CVE-2020-35749 Exploit Resumo O Plugin WordPress Simple Job Board é propenso a uma vulnerabilidade de travessia de diretório porque não verifica suficientemente a entrada fornecida pelo usuário. Explorar este problema pode permitir qu...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Sfruttamento di base che abusa di CVE-2020-3452 per enumerare i file standard accessibili nella directory web dei dispositivi CISCO ASA/FTD. Utilizzo: Per impostazione predefinita utilizza un elenco di file costruito da output di esempio di CVE-2018-0296 nel Metasploit...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

CVE-2006-3392

È un semplice tool per sfruttare le vulnerabilità di Webmin 1.290 / Usermin 1.220 - Arbitrary File Disclosure. Come usare: 1. Esegui lo script python exploit.py. 2. Inserisci la porta. 3. Seleziona la cartella che vuoi visualizzare. ⛔ Importante ⛔ Non siamo responsabili per l'uso di questo script...

CVE-2026-65611

A flaw was found in nnn, a file manager. This vulnerability, known as Shell Command Injection, allows an attacker to execute arbitrary commands. By creating a specially crafted directory name containing shell syntax on a shared filesystem, removable media, or within an extracted archive, an...

CVE-2026-76055

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...