CVE-2022-22954

CVE-2022-22954 CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 複数の脆弱性トリガーポイント検出、マルチスレッドバッチ検出、コマンド実行、ファイル書き込み // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution python CVE-2022-22954.py -u https://x.x.x.x -c "id" // Write file pytho...

CVE-2022-22954

複数の脆弱性トリガーポイントの検出、マルチスレッドバッチ検出、コマンド実行、ファイル書き込み // 単一ターゲットの脆弱性検出 python CVE-2022-22954.py -u https://x.x.x.x // コマンド実行 python CVE-2022-22954.py -u https://x.x.x.x -c "id" // ファイル書き込み python CVE-2022-22954.py -u https://x.x.x.x -fn test.jsp -fc "test" // ファイルアップロード（Windowsの場合、ファイル名にパス指定が必要） python...

MobSF - Path Traversal

MobSF is vulnerable to an issue with apktool CVE-2024-21633 that allows for RCE or arbitrary file writing. It does this through a path traversal vulnerability. This template tests for it by writing to a local file and reading that file. RCE can be achieved by overwriting jadx, as shown in the two...

CVE-2021-3129

CVE-2021-3129 — Laravel Ignition リモートコード実行 CVSS 9.8（Critical） | 安全でないファイル操作 → ログポイズニング → Phar デシリアライゼーション → RCE 概要 Laravel Ignition -c "whoami" 参考 NVD — CVE-2021-3129 Ignition Patch 2.5.2...

MemFiles

MemFiles 免責事項: このプロジェクトは複雑であり、その仕組みを理解して適切にテストしないと、Beacon をクラッシュさせてアクセスを失う可能性があります! "Technical Details, Design Considerations, and Commentary" セクションまでのすべてのドキュメントを読むことを強くお勧めします! はじめに MemFiles は CobaltStrike 用のツールキットで、オペレーターが Beacon プロセスによって生成されたファイルをターゲットシステムのディスクに書き込むのではなく、メモリに書き込むことを可能にします。Windo...

Exploit for Path Traversal in Vmware Vcenter_Server

CVE-2026-59310 – VMware vCenter Syslog Directory Traversal Lea...

CVE-2026-92958

vm2 (a Node.js sandboxing library) versions through 3.11.6 contain a builtin-module denylist bypass in NodeVM . When embedders use the wildcard with negative entries (e.g., -fs), matching is done by exact module name in lib/builtin.js, so fs/promises is not blocked. Sandboxed code can therefore c...

CVE-2026-92958 vm2 before 3.11.7 Denylist Bypass via fs/promises

vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard together with negative entries e.g. require: builtin: '', '-fs', '-childprocess' , negative entries are matched by exact module name in lib/builtin.js, so -fs removes only the built...

CVE-2026-71268

OpenPLC Runtime v3's compileprogram function webserver/openplc.py parses directives from uploaded Structured Text .st program files and writes the referenced content to with no validation that filepath stays within the ./core directory. A path-validation function, validatefilepath, exists elsewhe...

PT-2026-68291

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.3 Description An authenticated attacker can perform a Path Traversal attack via the Knowledge Bases API endpoint POST /api/v1/knowledge bases. This issue arises because the system uses user-supplied...

CVE-2026-15307

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the django.contrib.gis.gdal.GDALRaster constructor. Any value used in a spatial lookup against a GeometryField or...

litematica-exploit-poc

Litematica Exploit POC Proof of Concept for Litematica’s arbit...

GHSA-2956-977X-2W3R Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)

Summary image.download fetches a URL and writes the response to disk. It does not use the central path guard validatepathwithenvconfig, which confines writes to FLYTOSANDBOXDIR; instead it confines the output to outputdir, but outputdir is itself a caller parameter. Since the attacker sets both t...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the writeFile function in the ACP ToolBridge Workspace Handler. An attacker can access or modify files outside the intended directory by supplying crafted path input remotely. Details A Directory Traversal attack...

Directory Traversal

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

PYSEC-2026-1791 Picklescan vulnerable to Arbitrary File Writing

Summary Picklescan has got open and shutil in its default dangerous blocklist to prevent arbitrary file overwrites. However the module distutils isnt blocked and can be used for the same purpose ie to write arbitrary files. Details This is another vulnerability which impacts the downstream user. ...

Duplicate Advisory: Picklescan vulnerable to Arbitrary File Writing

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m273-6v24-x4m4. This link is maintained to preserve external references. Original Description picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangero...

GHSA-RMPP-8WF5-XX5Q Duplicate Advisory: Picklescan vulnerable to Arbitrary File Writing

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-m273-6v24-x4m4. This link is maintained to preserve external references. Original Description picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangero...

CVE-2025-71321 picklescan - Arbitrary File Writing via distutils Module Bypass

picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.fileutil.writefile. Attackers can construct malicious pickle objects to overwrite critical system files and achieve denial of service or remote code...

CVE-2025-71321

CVE-2025-71321 concerns the Python toolset picker scan showing an arbitrary file writing vulnerability in the package before version 0.0.33. The root cause is bypassing the dangerous blocklist by abusing distutils.file_util.write_file, enabling attackers to craft malicious pickle objects that ove...