CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE エクスプロイト 情報 root@kitploit: Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on:...

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

CVE-2021-41773 および CVE-2021-42013 のエクスプロイト Apache/2.4.49-2.4.50 におけるパストラバーサル攻撃と RCE 特徴 - URL のリストを受け取る - CGI と非 CGI の両方で動作 - Apache/2.4.49 - 2.4.50 で動作 使用方法 $ git clone https://github.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit $ cd...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana未授权文件读取 影響版本：8.0.0-lastest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd root@kitploit: GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host: 127.0.0.1:3000 User-Agent:...

EUVD-2026-75186

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...

EUVD-2026-75209

An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...

EUVD-2026-75175

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

Ashwesker-CVE-2026-21440

🚨 CVE-2026-21440 — 重大セキュリティ脆弱性 🧩 概要 CVE-2026-21440 は、AdonisJS フレームワーク、特にそのマルチパートファイルアップロード処理に影響を与える重大なパストラバーサル脆弱性 です。 ⚠️ 悪用された場合、攻撃者はサーバー上の任意の場所にファイルを書き込む ことができ、リモートコード実行（RCE） につながる可能性があります。 🏷️ 主要な詳細...

CVE-2026-1107

CVE-2026-1107 Nuclei テンプレート EyouCMS における CVE-2026-1107 を検出するための Nuclei テンプレートです。 この脆弱性により、認証されていない攻撃者が Diyajax.php の checkuserinfo 関数を介してパストラバーサル/任意ファイル読み取りを実行できます。 脆弱性の詳細 CVE ID: CVE-2026-1107 対象: EyouCMS 1.7.1 コンポーネント: メンバーアバターハンドラー Diyajax.php 影響: 重大 任意ファイル読み取り / RCE の可能性 ベクター: POST...

PT-2026-89725

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with pat...

PT-2026-89475

Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...

PT-2026-89369

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

PT-2026-89419

ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, allowing authenticated users to relocate files from outside the document root. Attackers can use path traversal sequences in oldFileName to move files writable by the PHP process...

PT-2026-89502

Summary Multiple backends, when given a specially crafted object to copy, can escape the backend confinement. | Backend | Keep/Close | Per-backend severity | |---|---|---| | sftp | Medium | Real filesystem escape, fires under default encoding. | | smb | Low-Medium | Escapes to a different SMB sha...

PT-2026-89423

A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument file path leads to path traversal. Local...

CVE-2025-57231

Docmost v0.21.0 contains a Path Traversal vulnerability in avatar attachments , allowing an unauthenticated attacker to disclose local files by sending a POST request to a public URL. The CVSS 3.1 score is 7.5 (HIGH) with impact limited to confidentiality (no integrity or availability impact). Th...

PT-2026-89417

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check validation function compares realpath to boolean true, which never succeeds, allowing authenticated attackers to submit...

CVE-2025-57231

Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url...

PT-2026-89494

Warning: A critical path traversal vulnerability in Plesk Backup Manager allows arbitrary root file writes by authenticated customers. CVE-2026-68487 CVSS3.0: 9.9. Read the advisory https://t.co/GniZ2f5Oox and Patch Patch Patch...

PT-2026-89477

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

PT-2026-89686

Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...