EUVD-2026-95797

KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename function within app/function/helper.function.php, where a single non-recursive strreplace sanitization pass can be bypassed using crafted filenames like "....//", combined with PclZip's extract call in...

CVE-2026-104081 KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction

KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename function within app/function/helper.function.php, where a single non-recursive strreplace sanitization pass can be bypassed using crafted filenames like "....//", combined with PclZip's extract call in...

CVE-2026-104081

KodExplorer versions prior to 4.55 are vulnerable to a path traversal vulnerability located in the unzip_pre_name() function within app/function/helper.function.php. The root cause is a non-recursive str_replace() sanitization pass that can be bypassed using crafted filenames like ....//, combine...

CVE-2026-56718

CVE-2026-56718 Nicht authentifizierte Path-Traversal-Schwachstelle in jdbhttpd/0.1.0 AJCloud AJY IPC-Firmware, die das entfernte Lesen beliebiger Dateien als Root ermöglicht, einschließlich Klartext-RTSP-Anmeldedaten. CWE: CWE-22 Unzureichende Einschränkung eines Pfadnamens auf ein eingeschränkte...

CVE-2026-35031

CVE-2026-35031: Jellyfin Untertitel-Upload Path Traversal zu RCE -darkred?style=flat-square -orange?style=flat-square TL;DR Eine kritische Path-Traversal-Schwachstelle im Jellyfin Media Server ermöglicht es authentifizierten Benutzern mit der Berechtigung „Untertitel hochladen“, Dateien an...

Vitejs-exploit

Vite Exploit CVE-2025-31125 Descrizione: Sfrutta il path traversal nell'endpoint @fs del Vite Development Server CVE-2025-31125 per accedere a file sensibili come /etc/passwd e /etc/hosts tramite URL appositamente costruiti. Creato da Muhammad Waseem. Utilizzo: python viteexploit.py -u...

CVE-2026-103663

A flaw was found in Ollama. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution by exploiting a path traversal flaw in the model pull application programming interface API endpoint. By supplying a crafted layer identifier, an attacker can write malicio...

CVE-2026-103412

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

CVE-2025-2294

Exploit CVE-2025-4403 Dettagli Pubblicato : 27 marzo 2025 Aggiornato : 28 marzo 2025 Gravità : Critico Punteggio CVSS: 9.8 CWE : CWE-22: Limitazione impropria del percorso di un nome di file a una directory ristretta 'Path Traversal' Versioni interessate : Tutte le versioni dalla n/a fino alla...

POC-CVE-2021-42013-EXPLOIT

-ff0055?style=for-the-badge&logo=python 🔥 CVE-2021-42013 Exploit Framework by Makaveli 💀 Multidimensionaler Kosmischer Hacker-Modus aktiviert... Ein fortschrittliches Tool zum Scannen, Exploitieren und zur Ferninteraktion, das entwickelt wurde, um die Sicherheitslücke Apache Path Traversal + RCE...

CVE-2020-3153

CVE-2020-3153 POC-Code für CVE-2020-3153 - Cisco anyconnect Path-Traversal-Schwachstelle Lesen Sie mehr über die Schwachstelle hier: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Schritte, um eine Windows-Shell auf dem Desktop mit...

CVE-2026-103412 Apache Camel Karavan: project file name path traversal when committing a project to Git

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

EUVD-2026-95756

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

CVE-2026-103412

Apache Camel Karavan versions from 3.18.0 before 4.22.1 are vulnerable to a path traversal vulnerability. The application's project file API uses project file names verbatim as path segments when writing to a working copy for a Git commit. By providing a name containing ../ sequences, an authenti...

CVE-2026-103412 Apache Camel Karavan: project file name path traversal when committing a project to Git

Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...

CVE-2019-14322

CVE-2019-14322 Modifikation des Exploits von faisalfs10x: PoC von CVE-2019-14322: Unzureichende Einschränkung eines Pfadnamens auf ein eingeschränktes Verzeichnis 'Path Traversal' https://www.acunetix.com/vulnerabilities/web/odoo-lfi-cve-2019-14322/ https://nvd.nist.gov/vuln/detail/CVE-2019-14322...

CVE-2026-66491

Beliebiges Dateilesen Arbitrary File Read über getSource in PhocaCommander PhocaCommander ≤ 6.1.3 – Pfad-Traversal für authentifizierte Administratoren, kein CSRF erforderlich ZUSAMMENFASSUNG Im Endpunkt des Datei-Editors von PhocaCommander existiert eine Schwachstelle, die das beliebige Lesen vo...

Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite...

SUSE-SU-2026:4606-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infini...

CVE-2021-41773

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...