CVE-2025-24813

CVE-2025-24813 - Apache Tomcat 路径等价漏洞 Apache Tomcat 由于对路径中的 ../ 序列处理不当，存在路径等价 / 路径遍历 问题。 CVE ID： CVE-2025-24813 严重性： 严重 参考链接： https://github.com/advisories/GHSA-83qj-6fr2-vhqg PoC 步骤： 1. 使用 PUT 方法发送curl 请求： curl -X PUT "http://target.com/uploads/../webapps/ROOT/updates.jsp" \ -H "Content-Type:...

CVE-2001-0931

CVE-2001-0931 Cooolsoft PowerFTP Server 2.03 存在目录遍历漏洞，攻击者可通过在 1 LS 或 2 GET 中使用 ..（点点）来列出或读取任意文件和目录。 SecurityFocus 公告： https://www.securityfocus.com/bid/3593/info Securiteam 公告： http://www.securiteam.com/exploits/6D00L2A35K.html 外部信息： https://marc.info/?l=bugtraq&m=100698397818175&w=2 Cisco 参考：...

CVE-2002-0347

CVE-2002-0347 Cobalt RAQ 4 中的目录遍历漏洞允许远程攻击者通过 HTTP 请求中的 ..（点点）读取受密码保护的文件，甚至可能读取 Web 根目录之外的文件。 Packetstorm 发布信息位于 https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 发布信息位于 https://www.securityfocus.com/bid/4208 作者 Alex Hernandez，又名 @alt3kx 厂商响应： 厂商已收到通知 已发布列表^s 安全...

Preproduce-CVE-2021-41773

复现 CVE-2021-41773 Apache HTTP Server 2.4.49 中的路径遍历和文件披露漏洞 CVE-2021-41773 POC $ docker compose up 确认运行正常 $ curl -I http://localhost HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 13:25:18 GMT Server: Apache/2.4.49 Unix Last-Modified: Mon, 11 Jun 2007 18:53:14 GMT ETag: "2d-432a5e4a73a80" Accept-Ranges:...

CVE-2024-4956-PoC

title="Nexus 仓库管理器" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2013-6987

CVE-2013-6987 Synology DiskStation Manager DSM 4.3-3810 Update 3 之前版本的 FileBrowser 组件中存在多个目录遍历漏洞，远程攻击者可通过 ..（点点）读取、写入和删除任意文件。 使用方法： python 示例： list filesystem python filelist.py ABCDFEGH1234 /home/../../../../...

NotCVE-2026-0009

nitroshare 中的路径遍历漏洞 描述 NitroShare Desktop v0.3.4 的局域网文件传输服务器存在路径遍历漏洞。该服务器监听所有网络接口（端口 40818），且无需身份验证。在接收文件时，发送方 JSON 项目头中的 name 字段会被直接传递，而未验证解析后的路径是否仍位于传输根目录 C:\UserName\Downloads\NitroShare 之内。同一局域网内的攻击者可以发送包含 ../（经典的点点斜杠攻击）序列的精心构造的文件名，从而在当前用户可访问的任何位置写入文件，包括 Windows 启动文件夹，以便在下次登录时执行代码（因此创建了相应的...

CVE-2023-32315

CVE-2023-32315 GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...

CVE-2021-43798

CVE-2021-43798 1. 概述 Grafana 是一个支持数据监控和管理功能的开源平台，在以下版本中存在路径遍历漏洞，可通过 ../ 等特殊字符操纵文件路径。 8.0.0 及以上，但低于 8.0.7 8.1.0 及以上，但低于 8.1.8 8.2.0 及以上，但低于 8.2.7 8.3.0 漏洞路径为 /public/plugins//，其中 是已安装插件的 ID。可通过以下资料确认脆弱路径。 https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p 2. 配置和运行漏洞环境 2.1...

CVE-2026-6925: Improper Limitation of a Pathname to a Restricted Directory

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2025-14753

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2025-14753

IBM Cloud Pak for Data 5.1.2 is vulnerable to a path traversal (CWE-22) attack. A remote, unauthenticated attacker can send a specially crafted URL containing "dot dot" (/../) sequences to traverse directories and view arbitrary files on the system, potentially exposing sensitive information. The...

CVE-2025-14753 IBM Cloud Pak for Data is vulnerable to path traversal

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

EUVD-2025-210936

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2025-14753: Improper Limitation of a Pathname to a Restricted Directory

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2026-92919: Improper Limitation of a Pathname to a Restricted Directory

admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the configured storage directory and overwrite...

CVE-2026-54587: Improper Link Resolution Before File Access

mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSETDIR or ASSETDIROWNERMODE in libmport/bundlereadinstallpkg.c used path-based mportmkdirp, ownership, and permission operations. A local attacker able to modify part of the target installation tree could use...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to path traversal (CVE-2025-14753)

Summary IBM Cloud Pak for Data is vulnerable to a path traversal attack. A remote attacker could send a specially crafted URL containing "dot dot" sequences /../ to traverse directories and view arbitrary files on the system, potentially exposing sensitive information. Vulnerability Details...

DEBIAN-CVE-2026-88046

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Remote values before fs/list, fs/walk, fs/sync, and fs/operations pass those values to destination...

CVE-2026-88046 rclone: source object names can escape the configured root on upload

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Remote values before fs/list, fs/walk, fs/sync, and fs/operations pass those values to destination...