Shiny for Python has path traversal in bookmark restore

Impact Shiny for Python's bookmark-restore path accepted a client-supplied stateid query-string value and joined it into the server-side bookmark directory /shinybookmarks/ without validating it. A value containing .. path segments, or an absolute path, could therefore cause the server to open an...

CVE-2022-29806

CVE-2022-29806 ZoneMinder up to 1.36.12 Language privilege escalation and RCE Description A Path Traversal vulnerability in debug log file and default language option in ZoneMinder version before 1.36.13 and 1.37.11 allows attackers to write and execute arbitrary code to achieve remote command...

Contao: Path traversal in the images controller

ImagesController joins the user controlled path onto the configured image target directory with Path::join, which canonicalises .. segments, and never calls Path::isBasePath to confirm the result stayed inside that directory. An unauthenticated GET with percent encoded dot segments therefore...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2021-43798-Grafana-Exp

Grafana V8. Arbitrary File Read Exploit – Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is commonly used as a visualizer for time series data and application analytics in infrastructure, and is also widely adopted in oth...

CVE-2024-38816-PoC

CVE-2024-38816 Proof of Concept PoC This is a proof of concept for the CVE-2024-38816 vulnerability, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image: Spring Boot 3.0.13, based on Spring Framework 6.0.3 docker build -t cve-2024-38816-poc . 2. Run the container and...

CVE-2021-41773-POC

CVE-2021-41773: отчёт о воспроизведении уязвимости Обзор уязвимости CVE ID : CVE-2021-41773 Название уязвимости : Apache HTTP Server — уязвимость обхода пути Уровень риска : высокий CVSS 7.5 Затронутые версии : Apache HTTP Server 2.4.49 Описание уязвимости : В Apache HTTP Server версии 2.4.49...

CVE-2026-108258 Shiny for Python - Path traversal in bookmark restore

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...

CVE-2026-108258

Shiny for Python versions 1.4.0 through 1.6.4 are vulnerable to a path traversal flaw in the bookmark restore functionality. The application fails to validate that the client-supplied state_id is a single safe path segment before joining it with the server-side shiny_bookmarks directory. This all...

EUVD-2026-95986

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...

CVE-2026-108258 Shiny for Python - Path traversal in bookmark restore

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied stateid and joins it into the server-side shinybookmarks directory without validating that it is a single safe path segment. An unauthenticated...

struts-uploader-vulnerability

CVE-2024-53677 — How the Exploit Works and How to Run It Vulnerability summary The flaw is in how Struts' FileUploadInterceptor hands off the uploaded filename to the action class. Normally the interceptor sanitizes the filename, but Struts also lets any multipart parameter be processed as an OGN...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - استغلال تنفيذ الأوامر عن بعد في لوحة Pterodactyl موسم HTB 10 - شرح آلة Pterodactyl نظرة عامة الهدف: آلة Pterodactyl HTB صعوبة متوسطة CVE: CVE-2025-49132 الخطورة: حرجة CVSS 9.8 نوع الهجوم: تنفيذ أوامر عن بعد بدون مصادقة المتأثر: لوحة Pterodactyl إصدار...

CVE-2026-107844

Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled path parameter to the configured image target directory with Path::join but does not use Path::isBasePath to verify that the canonical path remains inside that directory. An...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

WordPress Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Deletion vulnerability discovered by Wordfence PRISM in WordPress Plugin Listdom versions = 6.1.2...

cve-2021-42013

Apache 2.4.50 - Path Traversal ou exécution de code à distance CVE-2021-42013.py est un script Python qui vous aidera à détecter la vulnérabilité de Path Traversal ou d'exécution de code à distance dans Apache 2.4.50. Une instance Docker vulnérable est fournie pour vous permettre de vous exercer...

CVE-2026-107844 Contao: Path traversal in the images controller

Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled path parameter to the configured image target directory with Path::join but does not use Path::isBasePath to verify that the canonical path remains inside that directory. An...

CVE-2026-107844

The Contao Open Source CMS (versions 5.0.0 to 5.3.50 and 5.7.12) is vulnerable to a path traversal flaw in the ImagesController . The root cause is the use of Path::join() with a user-controlled {path} parameter without utilizing Path::isBasePath() to validate that the resulting path remains with...

EUVD-2026-95974

Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled path parameter to the configured image target directory with Path::join but does not use Path::isBasePath to verify that the canonical path remains inside that directory. An...