EUVD-2026-92043

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105125

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on path names in the catalog, allows attackers to compromise the accessibility of protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of the protected information...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on the name of the path to the catalog, allows attackers to compromise the integrity of the protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing a intruder to write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

CVE-2026-105125

LaraDashboard versions prior to 1.4.8 are vulnerable to a path traversal vulnerability within the /api/translations/{lang} endpoint. This flaw allows unauthenticated attackers to read sensitive JSON files, such as composer.json, by manipulating the {lang} route segment. Specifically, on Windows h...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

The W (vincent-peugnet/wcms) content management system, version through 3.18.0 , is vulnerable to Remote Code Execution (RCE) and Arbitrary File Write via the Media Upload API. The root cause is an unvalidated path in the POST /api/v0/media/upload/[*:path] endpoint. Authenticated editors can expl...

CVE-2020-13941

CVE-2020-13941: Использование UNC-путей в средах Windows в Apache Solr Было обнаружено, что несколько конечных точек Solr принимают абсолютные пути. В системах Windows эти абсолютные пути можно принудительно использовать, чтобы заставить ОС подключиться к подконтрольному атакующему SMB-серверу...

CVE-2025-2294

Эксплойт CVE-2025-4403 Подробности Опубликовано : 27 марта 2025 г. Обновлено : 28 марта 2025 г. Серьёзность : Критическая оценка CVSS: 9.8 CWE : CWE-22: CWE-22 Некорректное ограничение пути к каталогу обход каталога Затронутые версии : Все версии от н/д до 2.5.1 включительно Исследователь :...

trellix-tarslip-patch-bypass

trellix-tarslip-patch-bypass В 2023 году Trellix объявила 1, что исправила +61 000 проектов с открытым исходным кодом от CVE-2007-4559, старой уязвимости обхода пути. Анализируя их патч, легко заметить, что его можно обойти с помощью симлинка. Обход пути через симлинк — это старая техника, и она...

Zapscape

Трилогия побегов из KVM ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: побег с гостевой системы на хост в KVM/x86 Аннотация В этом документе описывается уязвимость Zapscape CVE-2026-64561 , которую обнаружил и о которой сообщил Hyunwoo Kim @v4bel...

CVE-2020-3452

CVE-2020-3452 CVSS 7.5 базовый wget https://bit.ly/32Q065t wget https://vpn.target.local:443/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ wget...

CVE-2020-9484

CVE-2020-9484 Воспроизведение уязвимости удалённого выполнения кода при десериализации сессий Apache Tomcat CVE-2020-9484 с помощью Kali 2.0 Окружение: 1. Kali 2.0 2. apache-tomcat-7.0.61-CVE-2020-9484.tar.gz веб-приложение — s2-053, в его каталог lib добавлен commons-collections4-4.0.jar Запуск...

CVE-2022-23378

CVE-2022-23378 : Отражённый XSS в TastyIgniter v3.2.2 CMS ресторана Отражённый XSS с аутентификацией существует в панели администратора TastyIgniter версии v3.2.2. Mitre URL: https://vulners.com/cve/CVE-2022-23378 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-23378 Доказательство концепции...

AWS-SAM-CLI-Vulnerabilities

Уязвимости AWS SAM CLI CVE-2025-3047 и CVE-2025-3048 В этом README представлен подробный анализ двух уязвимостей безопасности, обнаруженных в AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 и CVE-2025-3048 – а также проблемы и исправления на уровне кода. Обе уязвимости связаны с...