Apache-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Contributors 이희수@lheeeesoo Apache HTTP Server 2.4.49 has a vulnerability where it fails to properly block encoded parent paths during URL path normalization. An attacker can use values like .%2e to traverse outside the directories that the web serv...

CVE-2017-7089

CVE-2017-7089 Impacto : El procesamiento de contenido web maliciosamente diseñado puede llevar a un cross-site scripting universal Descripción : Existía un problema lógico en el manejo de la pestaña principal. Este problema se solucionó con una mejor gestión del estado. Safari 10 Local SOP bypass...

ppid-spoofing

https://www.countercept.com/blog/detecting-parent-pid-spoofing/...

CVE-2018-17254

CVE-2018-17254 Exploit Title: Joomla JCK Editor 6.4.4 - Inyección SQL 'parent' Google Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ Página del vendedor: http://docs.arkextensions.com/downloads/jck-editor Versión: 6.4.4 Probado en: Debian 10 Ubuntu Windows 11/10 CVE : CVE-2018-17254...

https-nj.gov---CVE-2018-14040

https-nj.gov---CVE-2018-14040 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute and the data-parent attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix...

Raccine

Raccine A Simple Ransomware Protection Why We see ransomware delete all shadow copies using vssadmin pretty often. What if we could just intercept that request and kill the invoking process? Let's try to create a simple vaccine. How it works We register a debugger for vssadmin.exe and wmic.exe,...

CVE-2017-11882-Blocker

CVE-2017-11882-Blocker Un controlador de Windows que neutraliza CVE-2017-11882 : Cómo funciona Este proyecto se divide en un controlador de kernel y un componente de notificación en modo usuario que se comunican a través de un dispositivo personalizado utilizando el modelo de llamada invertida...

CABTrap_OneNote2007

CABTrapOneNote2007 Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution Microsoft Office Onenote 2007 CVE-2014-2815 ".ONEPKG" File Directory Traversal Vulnerability Leads to Arbitrary Code Execution OneNote 2007 is prone to...

CVE-2026-104871

The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prerendered-page retrieval logic in @angular/ssr/node, and in @angular/ssr for versions 17 through 18, accepts a relative request URL containi...

SelectMyParent

What's this This is a project for parent process spoofing. How to use step 1:Select a parent process and remember the pid Step 2:Execute the following command. Implement parent process spoofing SelectMyParent.exe notepad 928 Step 3:Using process explorer to view the process tree, you can see the...

CVE-2026-97318

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...

EUVD-2026-91197

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...

CLEANSTART-2026-SN29666 Previously, resolving relative paths containing parent directory ('

CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

CVE-2017-8759

CVE-2017-8759 Solo mis puertos de CVE-2017-8759 Código trasladado a otro repositorio padre. ¿Redirigir?...

CVE-2017-11882

CVE-2017-11882 Puerto de Empire para CVE-2017-11882 El código se ha trasladado a otro repositorio principal. ¿Redirigir?...

PT-2026-104094

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...

Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle

SummaryAny authenticated user can move one of their own folders under itself, leaving a loop in their folder tree. The re-parent endpoint performed no check that the new parent was not the folder itself or one of its own subfolders, and the folder tree walks did not track which folders they had...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_1617)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261617 advisory. kernel: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing CVE-2025-38568 kernel: ASoC: Intel: bytcrrt5640: Fix invalid quirk input mappi...

Rocky Linux 9 [CIQ] Security Update: nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2023_2654)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20232654 advisory. glob-parent: Regular Expression Denial of Service CVE-2021-35065 c-ares: buffer overflow in configsortlist due to missing string length check CVE-2022-4904...

CLEANSTART-2026-EV76983 Previously, resolving relative paths containing parent directory ('

CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...