CVE-2025-5880

Whistle 2.9.98 contains an unpatched path traversal vulnerability because the /cgi-bin/sessions/get-temp-file endpoint fails to adequately sanitize user input in the filename parameter. By supplying absolute paths or traversal sequences like /etc/passwd, an attacker can bypass directory...

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

PT-2026-84478

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An authenticated Path Traversal vulnerability exists in the web-based management interface. Path Traversal is a flaw that allows an attacker to access files and directories that are stored...

TencentOS Server 4: rsync (TSSA-2026:0874)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0874 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2018-18778

CVE-2018-18778 - ACME minihttpd Lectura Arbitraria de Archivos CVE-2018-18778 es una vulnerabilidad de seguridad que afecta a ACME minihttpd un servidor web ligero. La vulnerabilidad permite a atacantes remotos leer archivos arbitrarios en el servidor. Fue divulgada públicamente en octubre de 201...

CVE-2026-79407

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...

CVE-2023-35843

CVE-2023-35843 NocoDB lectura arbitraria de archivos CVE-2023-35843...

CVE-2025-30208

CVE-2025-30208 A PoC del script de explotación para la vulnerabilidad de Lectura Arbitraria de Archivos de Vite /@fs/ Path Traversal en transformMiddleware CVE-2025-30208. Se puede consultar el análisis detallado en este post. Vulnerable en versiones anteriores a : 6.2.3 6.1.2 6.0.12 5.4.15 4.5.1...

CVE-2026-53508

oasdiff (a Go command-line tool and package for comparing OpenAPI specs, hosted at github.com/oasdiff/oasdiff ) failed to enforce the --allow-external-refs=false flag on the git-revision load path (rev:path form, e.g. main:openapi.yaml). From version 1.13.2 through 1.18.0 , external $refs were re...

CVE-2026-53508 oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow-external-refs=false library: openapi3.Loader.IsExternalRefsAllowed = false when loading a spec from a git revision the...

CVE-2026-53508 oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow-external-refs=false library: openapi3.Loader.IsExternalRefsAllowed = false when loading a spec from a git revision the...

CVE-2026-53553 Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff File Compare, when handling file paths provided by the client. This issue has been patched in version 1.18.0...

CVE-2026-53553 Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff File Compare, when handling file paths provided by the client. This issue has been patched in version 1.18.0...

CVE-2026-53553

Goploy is an open-source automation deployment system affected by a path traversal vulnerability in the /deploy/fileDiff (File Compare) backend API endpoint. The flaw occurs when handling client-supplied file paths, enabling arbitrary file read with potential for remote server compromise , as ind...

CVE-2026-79750

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own list views and config edits enforce ownership, but the...

CVE-2026-79750 MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own list views and config edits enforce ownership, but the...

CVE-2026-79750 MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own list views and config edits enforce ownership, but the...

CVE-2026-79750

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs. Prior to version 1.0.30 , while list views and config edits correctly enforce per-user ownership, the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP serve...

CVE-2022-44268-PoC

CVE-2022-44268-PoC This repository includes a test file for CVE-2022-44268 ImageMagick Arbitrary File Read. Testing 1. Upload the pngout.png into a Webapplication 2. Check if the image can be cropped, cut or edited in any way 3. Download the edited image 4. Use identify -verbose editimage.png to...

CVE-2024-23897

CVE-2024-23897: Vulnerabilidad de Lectura Arbitraria de Archivos en Jenkins que lleva a RCE Introducción Este repositorio contiene un script de Python que explota una vulnerabilidad crítica CVE-2024-23897 en Jenkins, que permite la lectura arbitraria de archivos y la ejecución remota de código RC...