CVE-2026-78620

CVE-2026-78620 affects the Okta Access Gateway , specifically its Kerberos configuration handler , which fails to validate file paths supplied in event payloads before writing file contents. Because the attacker-controlled path is used directly as the write destination, files can be written to un...

CVE-2026-78624

Okta Access Gateway contains an improper path validation flaw in its backup restore function . The function does not validate the filename embedded in an encrypted backup payload, allowing file contents to be written to unintended locations on the appliance filesystem. The vulnerability is rated ...

CVE-2020-0618_DETECTION

CVE-2020-0618 - PoC de Detección de RCE en Microsoft SQL Server Reporting Services SSRS 📜 Descripción Este es un PoC sencillo para detectar CVE-2020-0618 , una vulnerabilidad de ejecución remota de código que afecta a Microsoft SQL Server Reporting Services SSRS. La vulnerabilidad existe debido a...

CVE-2026-39813

🛡️ CVE-2026-39813 - Vulnerabilidad de Path Traversal en Fortinet FortiSandbox 📌 Descripción General CVE-2026-39813 es una vulnerabilidad crítica de path traversal que afecta a Fortinet FortiSandbox. La vulnerabilidad se debe a una validación incorrecta de las rutas de archivo proporcionadas por el...

EUVD-2026-64338

NLTK: Symlink-based sandbox bypass in FramenetCorpusReader bypasses the fix for CVE-2026-54292...

EUVD-2026-64309

NLTK: FileSystemPathPointer.open sandbox check is dead code — arbitrary file read via file:// protocol...

EUVD-2026-64314

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root...

Feast Feature Server <=0.58.0 - Arbitrary File Read

Feast the open-source Feature Store Feature Server through 0.58.0 exposes an unauthenticated POST /read-document endpoint that reads an arbitrary, caller-supplied file path with no authentication and no path validation. The readdocumentendpoint handler passes the JSON filepath field straight to...

red-tldr

Red Team TL;DR English | 中文简体 ¿Qué es Red Team TL;DR? red-tldr es una herramienta ligera de consulta de comandos para equipos rojos. Ayuda a operadores experimentados de red team a encontrar rápidamente los comandos, técnicas y puntos clave que necesitan, como un comando man construido para...

CVE-2025-65345

CVE-2025-65345 – Authenticated Path Traversal From Zip Function Leading to Filesystem Disclosure in laravel-file-manager v3.3.1 🧭 Overview An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to use...

CVE-2025-56499

CVE-2025-56499 Lectura arbitraria de archivos mediante falta de validación de ruta en el proveedor de reglas local Corrección ascendente: https://github.com/MetaCubeX/mihomo/pull/2177 Versiones afectadas: mihomo = v1.19.11 Resumen Al analizar la configuración de rule-providers, la rama type =...

CVE-2023-20198

CVE-2023-20198 Exploit PoC para CVE-2023-20198 Descripción CVE-2023-20198 se caracteriza por una validación de ruta incorrecta que permite eludir el filtrado de Nginx para alcanzar el endpoint web webuiwsmahttp sin requerir autenticación. Al omitir la autenticación en el endpoint, un atacante pue...

CVE-2023-27326

Escape de VM de Parallels Desktop Este repositorio contiene un exploit para una vulnerabilidad de Parallels Desktop a la que se le ha asignado CVE-2023-27326. Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop. El exploit fue...

CVE-2023-27326

Escape de máquina virtual de Parallels Desktop Este repositorio contiene un exploit para una vulnerabilidad de Parallels Desktop a la que se le ha asignado el CVE-2023-27326. Esta vulnerabilidad permite a atacantes locales escalar privilegios en instalaciones afectadas de Parallels Desktop. El...

CVE-2021-45010

CVE-2021-45010 🐍 Exploit PoC en Python creado para CVE-2021-45010. Tiny File Manager 2.4.7 Uso root@kitploit: usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME...

CVE-2022-37706

CVE-2022-37706 概述 CVE-2022-37706 是一个本地权限提升 LPE 漏洞，存在于 Linux 的 Enlightenment 桌面环境的 enlightenmentsys 组件中。该漏洞允许具有低权限的本地用户在易受攻击的系统上将权限提升为 root。 CVE ID: CVE-2022-37706 严重性: High CVSS v3.1: 7.8 攻击向量: Local 受影响组件: enlightenmentsys CWE: CWE-269 Improper Privilege Management 描述 该漏洞的产生原因是二进制文件...

CVE-2026-81830

A flaw was found in OpenVPN. The Windows interactive service in OpenVPN contains an incorrect file path validation vulnerability. A local authenticated user could exploit this flaw to bypass the trusted configuration directory constraint, leading to a security bypass and potential integrity...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...