Uncontrolled Search Path Element

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

CVE-2024-0670

CVE-2024-0670 – Local Privilege Escalation in CheckMK Agent PowerShell PoC Abstract This repository presents an independent PowerShell proof of concept for CVE-2024-0670 , a Windows local privilege escalation vulnerability in the CheckMK Agent. The vulnerability allows a low-privileged local user...

CVE-2026-108544

A path traversal vulnerability exists in the Lippu Docx Reader Office Viewer App on Android , affecting versions up to 1.4.5 . The flaw is located in the word.office.docxviewer.document.docx.reader.ViewTxt function, where improper handling of the _display_name argument allows for directory traver...

CVE-2026-108544 Lippu Docx Reader Office Viewer App path traversal

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

CVE-2026-108544 Lippu Docx Reader Office Viewer App path traversal

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

EUVD-2026-96865

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

CVE-2026-108543

The ag2ai ag2 library (versions up to 0.13.4 ) is vulnerable to a path traversal vulnerability within the UserProxyAgent component. The root cause is the improper handling of the filename argument in the os.path.join function, which allows for remote execution of the attack. While an exploit has ...

CVE-2026-108543 ag2ai ag2 UserProxyAgent os.path.join path traversal

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...

EUVD-2026-96864

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...

CVE-2026-108543

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...

CVE-2026-108542

A server-side request forgery (SSRF) vulnerability exists in the 021is elvix-sdk up to version 0.10.1 . The flaw is located within an unknown functionality of the src/mcp/index.ts file in the MCP Request Handler component. By manipulating the argument path , an attacker can execute the attack rem...

EUVD-2026-96863

A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Handler. The manipulation of the argument path results in server-side request forgery. The attack can be executed remotel...

progress-burp

Progress Tracker Extensión de Burp Suite para seguir el progreso de evaluación de vulnerabilidades. Características Captura de elementos peticiones únicas desde las herramientas de Burp Suite Proxy, Repeater, Target. La clave única de la petición se define como: destino host, puerto, protocolo,...

doctrack

Doctrack Herramienta para manipular y armamentizar documentos Office Open XML. Características Crear documentos Office Open XML Word, Excel Insertar píxeles de seguimiento y rutas UNC Inyección de plantilla remota Insertar partes CustomXML Inspeccionar URLs de destino externas, metadatos y partes...

pidrila

PIDRILA Versión actual: v0.1.0 2020.11.08 Resumen PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer es un prototipo de escáner de rutas web asíncrono realmente rápido desarrollado por el equipo de BrightSearch para todos los rastreadores éticos de la red...

blinko-plugin-path-traversal-rce

Blinko: Authenticated Plugin Path Traversal to Root Code Execu...

dirstalk

Dirstalk Dirstalk es una aplicación multi-hilo diseñada para realizar fuerza bruta de rutas en servidores web. La herramienta contiene funcionalidades similares a las ofrecidas por dirbuster y dirb. Aquí puedes verla en acción: Contenido Cómo usarlo Escaneo Recursos útiles Generador de diccionari...

dotdotslash

dotdotslash Una herramienta para ayudarte a buscar vulnerabilidades de Directory Traversal Benchmarks Plataformas que probé para validar la eficiencia de la herramienta: DVWA low/medium/high bWAPP low/medium/high Capturas de pantalla Instalación Puedes descargar la última versión clonando este...

CVE-2026-108693

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with...

CVE-2026-108693

A flaw was found in ImageMagick. An insecure search path vulnerability allows a local attacker to achieve arbitrary code execution by placing a malicious executable into the application's working directory. When converting document formats such as PDF or PostScript on Windows systems without a...