cve-2021-42013-httpd

Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...

CVE-2026-19794

CVE-2026-19794 WP-Stats = 2.56 - Cross-Site Scripting Almacenado No Autenticado URL del Plugin https://wordpress.org/plugins/wp-stats/ Descripción XSS reflejado no autenticado en el parámetro GET statsauthor de statspage. El filtro de saneamiento striptags se aplica antes de urldecode, lo que...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198是思科IOS XE软件Web UI功能中的一个严重漏洞，允许未经身份验证的远程攻击者在受影响的系统上创建具有特权级别15的账户，从而完全控制设备。 该漏洞的产生主要源于Web UI功能中路径解析的不当处理。攻击者通过精心构造的HTTP请求，利用双重URL编码绕过Nginx的路径过滤机制，直接访问受保护的内部端点，如/webuiwsmahttp。通过这些端点，攻击者可以发送特制的SOAP请求，执行任意CLI命令或进行配置更改。...

CVE-2021-42013

CVE-2021-42013 — PoC：路径遍历 + 通过 modcgi 实现 RCE（绕过补丁） 仅限在受控和自有环境中使用。未经授权不得针对系统使用。 描述 为演示 CVE-2021-42013 而开发的 PoC，该漏洞存在于 Apache HTTP Server 2.4.50 中。 此 CVE 是 Apache 为 CVE-2021-41773 发布的补丁的绕过方式。2.4.50 版本试图通过添加一项拒绝 .%2e 和 %2e. 序列的验证来修复之前的路径遍历漏洞。然而，该验证并不充分：它没有考虑到通过双重 URL 编码 也能达到相同效果，因此留下了相同的攻击面。 与...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Bypass no autorizado RCE de Weblogic CVE-2020-14882 Script de prueba de bypass no autorizado RCE de Oracle Weblogic Funciona en Python3 Solicitudes POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537....

CVE-2021-42013

CVE-2021-42013 贡献者 石恩浩@eunho87 CVE-2021-42013 Apache http服务器路径遍历 漏洞概要 Apache HTTP Server 2.4.50路径规范化处理中存在一个漏洞，可以在无需认证 的情况下读取任意文件或执行远程代码。 该漏洞源于CVE-2021-41773的不完整修补，通过双重URL编码（%%32%65）绕过了Apache的路径拦截。 参考资料 NVD - CVE-2021-42013 Apache Security Advisory 漏洞条件 CVE-2021-42013生效需要满足以下条件： 1. Apache...

WordPress WP-Stats 2.5.6 Cross Site Scripting

WordPress WP-Stats plugin versions 2.5.6 and below suffer from a persistent cross site scripting vulnerability. https://packetstorm.news/download/231119...

VulnCheck KEV: CVE-2026-54066

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

SUSE CVE-2026-54066

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

GO-2026-5964 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read), Incomplete fix of CVE-2026-41894 in github.com/siyuan-note/siyuan/kernel

SiYuan: Path Traversal via Double URL Encoding in /assets/path publish mode arbitrary file─read, Incomplete fix of CVE-2026-41894 in github.com/siyuan-note/siyuan/kernel...

EUVD-2026-39122

SiYuan: Path Traversal via Double URL Encoding in /assets/path publish mode arbitrary file─read, Incomplete fix of CVE-2026-41894...

CVE-2026-54066 SiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

CVE-2026-54066

SiYuan (

CVE-2026-54066: Improper Limitation of a Pathname to a Restricted Directory

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 "Path Traversal via Double URL Encoding" sanitized the /export/ route but the identical root cause remains in the /assets/path route. In publish mode anonymous read-only HTTP endpoint,...

PT-2026-52107

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.0 Description An unauthenticated remote attacker can read arbitrary files within the WorkspaceDir when the system is in publish mode, which is an anonymous read-only HTTP endpoint. This is achieved by using...

EUVD-2026-25626

SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...

CVE-2026-41894 SiYuan: Incomplete Fix Bypass for CVE-2026-30869: Path Traversal via Double URL Encoding in `/export/` Endpoint

SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...

CVE-2026-41894: Improper Limitation of a Pathname to a Restricted Directory

SiYuan is an open-source personal knowledge management system. Prior to 3.6.5, the fix for CVE-2026-30869 only added a denylist check IsSensitivePath but did not address the root cause — a redundant url.PathUnescape call in serveExport. An authenticated attacker can use double URL encoding...

CVE-2025-70936

Vtiger CRM 8.4.0 contains a reflected cross-site scripting XSS vulnerability in the MailManager module. Improper handling of user-controlled input in the folder parameter allows a specially crafted, double URL-encoded payload to be reflected and executed in the context of an authenticated user s...

CVE-2025-70936

Vtiger CRM version 8.4.0 is vulnerable to a reflected cross-site scripting (XSS) flaw in the MailManager module. The root cause is the improper handling of user-controlled input within the _folder parameter, which allows an attacker to deliver a specially crafted, double URL-encoded payload . Thi...