CVE-2025-8088

Análise de Segurança: Exploração de Path Traversal no WinRAR CVE-2025-8088 Nota: Repositório em desenvolvimento. Este projeto receberá atualizações futuras com análises adicionais, scripts de análise não-exploit e material para apresentação. Novas versões serão publicadas assim que disponíveis...

CVE-2025-55182

React Server Components und das Flight-Protokoll verstehen React Server Components ist ein Feature, das in React 19 eingeführt wurde und es ermöglicht, Komponenten auf dem Server statt im Browser des Clients zu rendern. Der Server kann komplexe Rechenaufgaben verarbeiten, während er nur das...

cve-2021-41773-source-code-analysis

Analisi del Codice Sorgente di Apache HTTP Server CVE-2021-41773 Uno strumento di analisi statica delle patch basato su Python per studiare la causa principale e la risoluzione di CVE-2021-41773 Path Traversal di Apache HTTP Server confrontando il codice sorgente vulnerabile di Apache HTTP Server...

CVE-2023-52076-PoC

CVE-2023-52076-PoC Proof-of-Concept für CVE-2023-52076, eine kritische Path-Traversal- und Arbitrary-File-Write-Schwachstelle in den Dokumentbetrachtern Atril/Xreader , die MATE-Desktop-Umgebungen betrifft. Das Skript erzeugt ein präpariertes EPUB-Payload mit Zip-Slip-Pfaden, die entweder auf die...

CVE-2023-31059-Repetier-Server-1.4.10-Unauthenticated-Path-Traversal

Repetier-Server = 1.4.10 Autore: Mohammed Idrees Banyamer Ruolo: Ricercatore di Sicurezza Paese: Giordania 🇯🇴 Panoramica Exploit proof‑of‑concept per una vulnerabilità remota non autenticata di path traversal / LFI in Repetier‑Server ≤ 1.4.10. La vulnerabilità consente la lettura arbitraria di fil...

CVE-2026-55569 aqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

CVE-2026-20660

Bundle PoC CVE-2026-20660 Questa cartella contiene un proof-of-concept autonomo per: CVE-2026-20660 Path traversal in NSGZipDecoder di CFNetwork tramite FNAME del gzip Impatto su Safari macOS vulnerabile con apertura automatica abilitata 1. Struttura della directory server.py: server PoC...

EUVD-2026-67817

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwrite existing files with content sourc...

CVE-2026-82286

gpt-crawler through version 1.5.1 (BuilderIO) is vulnerable to an arbitrary file write via the outputFileName parameter in the POST /crawl endpoint. The root cause is a failure to validate this parameter, allowing unauthenticated attackers to supply absolute paths or parent-directory segments and...

EUVD-2026-67806

Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process...

CVE-2026-82275 Qwen-Agent Arbitrary File Read via Caller-Supplied Document Path

Qwen-Agent through 0.0.34 contains a path traversal vulnerability in the document parser that fails to restrict file access to intended directories. Attackers can supply absolute file paths to the unauthenticated Gradio interface to read arbitrary files accessible by the server process...

CVE-2026-82275

Qwen-Agent through 0.0.34 contains a path traversal vulnerability in its document parser (in simple_doc_parser.py and utils.py) that fails to restrict file access to intended directories. Because the Gradio interface is unauthenticated, an attacker can supply absolute file paths to read arbitrary...

EUVD-2026-67795

Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary...

CVE-2026-82264

Duplicacy through 3.2.5 is affected by a path traversal vulnerability in its restore function. The root cause is a failure to validate entry paths deserialized from snapshot files, allowing an attacker to craft malicious snapshot entries containing directory traversal sequences that write files o...

CVE-2026-82264 Duplicacy Path Traversal during Restore via Unsanitized Snapshot Paths

Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary...

CVE-2026-82112

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

CVE-2026-65694-PoC

CVE-2026-65694 — Leitura Arbitrária de Arquivos Não Autenticada no Microweber CMS Prova de conceito para CVE-2026-65694 , uma leitura arbitrária de arquivos por path-traversal não autenticado no Microweber CMS. Um atacante não autenticado pode ler qualquer arquivo que o usuário do servidor web...

CVE-2025-63408

CVE-2025-63408 path-traversal.py: Uma reimplementação de https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Utiliza uuids como parte do nome de arquivo solicitado para evitar que o servidor remoto falhe após a primeira exploração de path traversal. run.py / shell.py: wrapper...

CVE-2026-51592

CVE-2026-51592 — Path Traversal in TahaBakhtari/SubtitleGenerator Resumo Uma vulnerabilidade de path traversal existe no endpoint /updatesubtitle do TahaBakhtari/SubtitleGenerator. O endpoint aceita um parâmetro filename de um cliente não autenticado e o combina com um diretório base fixo usando...