Lucene search
+L

55541 matches found

Kitploit
Kitploit
added 2026/09/10 12:48 a.m.10 views

Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit

Exploit for CVE-2021-41773 and CVE-2021-42013 Path traversal attack and RCE in Apache/2.4.49-2.4.50 Features - Take a list of urls - Works for both CGI and non-CGI - Works for Apache/2.4.49 - 2.4.50 Usage $ git clone https://github.com/CalfCrusher/Path-traversal-RCE-Apache-2.4.49-2.4.50-Exploit $...

9.8CVSS8AI score0.99992EPSS
SaveExploits191
Kitploit
Kitploit
added 2026/09/10 12:47 a.m.8 views

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-latest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd root@kitploit: GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host:...

7.5CVSS8.2AI score0.88503EPSS
SaveExploits45References1
EUVD
EUVD
added 2026/09/10 12:30 a.m.7 views

EUVD-2026-75186

Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...

9.3CVSS0.00331EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 12:30 a.m.6 views

EUVD-2026-75209

An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...

0.00361EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 12:30 a.m.6 views

EUVD-2026-75175

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

7.7CVSS0.00393EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:27 a.m.8 views

Ashwesker-CVE-2026-21440

🚨 CVE-2026-21440 — Critical Security Vulnerability 🧩 Summary CVE-2026-21440 is a critical path traversal vulnerability affecting the AdonisJS framework, specifically its multipart file upload handling. ⚠️ If exploited, attackers can write files anywhere on the server , potentially leading to remot...

9.2CVSS8.4AI score0.01049EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 12:07 a.m.10 views

CVE-2026-1107

CVE-2026-1107 Nuclei Template Nuclei template for detecting CVE-2026-1107 in EyouCMS. The vulnerability allows unauthenticated attackers to perform Path Traversal/Arbitrary File Read via the checkuserinfo function in Diyajax.php. Vulnerability Details CVE ID: CVE-2026-1107 Target: EyouCMS 1.7.1...

9.8CVSS6.7AI score0.00498EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.8 views

PT-2026-89725

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with pat...

9.8CVSS0.01318EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.7 views

PT-2026-89475

Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...

6.3CVSS0.0014EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.11 views

PT-2026-89369

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5...

7.5CVSS0.00335EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.9 views

PT-2026-89419

ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, allowing authenticated users to relocate files from outside the document root. Attackers can use path traversal sequences in oldFileName to move files writable by the PHP process...

8.7CVSS0.00487EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.11 views

PT-2026-89502

Summary Multiple backends, when given a specially crafted object to copy, can escape the backend confinement. | Backend | Keep/Close | Per-backend severity | |---|---|---| | sftp | Medium | Real filesystem escape, fires under default encoding. | | smb | Low-Medium | Escapes to a different SMB sha...

5.3CVSS0.00294EPSS
SaveExploits0References9
CVE
CVE
added 2026/09/10 12:00 a.m.15 views

CVE-2025-57231

Docmost v0.21.0 contains a Path Traversal vulnerability in avatar attachments , allowing an unauthenticated attacker to disclose local files by sending a POST request to a public URL. The CVSS 3.1 score is 7.5 (HIGH) with impact limited to confidentiality (no integrity or availability impact). Th...

7.5CVSS0.00387EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.8 views

PT-2026-89417

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check validation function compares realpath to boolean true, which never succeeds, allowing authenticated attackers to submit...

8.8CVSS0.00446EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.8 views

PT-2026-89423

A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument file path leads to path traversal. Local...

4.8CVSS0.00211EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.10 views

PT-2026-89477

knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system...

9.8CVSS0.00438EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/10 12:00 a.m.28 views

CVE-2025-57231

Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url...

0.00387EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.10 views

PT-2026-89494

Warning: A critical path traversal vulnerability in Plesk Backup Manager allows arbitrary root file writes by authenticated customers. CVE-2026-68487 CVSS3.0: 9.9. Read the advisory https://t.co/GniZ2f5Oox and Patch Patch Patch...

9.9CVSS0.00363EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.9 views

PT-2026-89686

Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...

6.3CVSS0.0014EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.8 views

PT-2026-89682

Summary Multiple backends, when given a specially crafted object to copy, can escape the backend confinement. | Backend | Keep/Close | Per-backend severity | |---|---|---| | sftp | Medium | Real filesystem escape, fires under default encoding. | | smb | Low-Medium | Escapes to a different SMB sha...

5.3CVSS0.00294EPSS
SaveExploits0References6
Rows per page
Query Builder