CVE-2026-20262-Cisco-Catalyst-SD-WAN-Manager-Arbitrary-File-Write-

CVE-2026-20262 - Cisco Catalyst SD-WAN Manager Arbitrary File Write Path Traversal -orange 📋 Description CVE-2026-20262 is a Path Traversal CWE-22 vulnerability in the web interface of Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage. It allows an authenticated attacker with write permission...

CVE-2026-82286-gpt-crawler-Arbitrary-File-Write

CVE-2026-82286 — gpt-crawler Неаутентифицированная произвольная запись файлов Proof-of-concept для неаутентифицированной произвольной записи файлов в BuilderIO/gpt-crawler ≈22k ★ через параметр outputFileName конечной точки API POST /crawl. | ---|--- CVE| CVE-2026-82286 Продукт| gpt-crawler...

CVE-2022-41678

CVE-2022-41678: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ By listing and inspecting the MBeans exposed by the Jolokia API at http://127.0.0.1:8161/api/jolokia the following attack vectors have been identified: Arbitrary File Write using Log4J resulting in Remote Code Executio...

CVE-2026-105123

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123: Unrestricted Upload of File with Dangerous Type

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

The W (vincent-peugnet/wcms) content management system, version through 3.18.0 , is vulnerable to Remote Code Execution (RCE) and Arbitrary File Write via the Media Upload API. The root cause is an unvalidated path in the POST /api/v0/media/upload/[*:path] endpoint. Authenticated editors can expl...

CVE-2026-52832-PoC-exploit-nuclio-dashboard

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard NOP mode accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root...

CVE-2017-1000028

CVE-2017-1000028 POC&EXP for GlassFish4.1.1not including 4.1.1. Param: -u:For single url but without outputing the /etc/passwd. -ut:For single url but with outputing the /etc/passwd. -f:Read url from the url.txt and prove it if the url is vulnerable. -c:This must be used with the parameter...

CVE-2026-104286-POC

Эксплойт обхода пути FortiMail CVE-2026-104286 Обзор Продвинутый эксплойт удалённой записи произвольных файлов без аутентификации для CVE-2026-104286 в FortiMail. Специально сформированные HTTP/HTTPS-запросы обходят санитизацию путей в веб-клиенте, что позволяет создавать произвольные файлы в...

CVE-2026-103648

CVE-2026-103648 — Path Traversal в image-downloader Обнаружено:Amirhossein Roustaei @EterNullSec — Eternull Security ⚠️ Только в образовательных целях. Этот репозиторий документирует уязвимость, раскрытую в рамках ответственного раскрытия. Весь PoC-код предназначен исключительно для авторизованных...

disclosure-thinkware-u3000

Thinkware U3000 Dashcam: уязвимости безопасности Три уязвимости в протоколе локального управления по WiFi видеорегистратора Thinkware U3000, обнаруженные путём обратной разработки официального Android-приложения и подтверждённые на реальном оборудовании. Все три требуют только доступа к локальной...

CVE-2026-100520-laranode-path-traversal

CVE-2026-100520 — Laranode 파일 관리자의 경로 순회Path Traversal → RCE 허가된 보안 연구. 방어 및 교육 목적으로만 사용되는 PoC입니다. Laranode의 파일 관리자 업로드 엔드포인트에서 발생하는 인증된 경로 순회 취약점을 통해, 낮은 권한의 테넌트가 자신의 홈 디렉터리 외부 에 임의의 파일을 작성할 수 있습니다 — 다른 테넌트의 웹 루트에 PHP 웹 셸을 심는 것도 가능하며 — 이는 해당 테넌트 권한으로의 원격 코드 실행으로 이어집니다. | ---|--- CVE|...

CVE-2016-5195

CVE-2016-5195 DirtyCOW PoC Modified from dirtycow.github.ioc include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i 100000000; i++ c += madvisemap, 100, MADVDONTNEED;...

cve-2021-4034

cve-2021-4034...

CVE-2022-44900-demo-lab

CVE-2022-44900 Demo lab Demo webapp vulnerable to CVE-2022-44900. CVE-2022-44900 is a directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier that allow attackers to read and write arbitrary files on the local machine via...

CVE-2018-11235-PoC

PoC exploit for CVE-2018-11235 repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out '9c48e0a785dec84cb252677a8a7d55feaeac056c...

pipe-primitive

pipe-primitive Эксплуатационный примитив в ядре Linux, вдохновлённый DirtyPipe CVE-2022-0847. На днях я, как и многие уважаемые коллеги по безопасности, изучил и воспроизвёл уязвимость DirtyPipe CVE-2022-0847 и глубоко прочувствовал, насколько она удобна. Эта уязвимость начинается с...