CVE-2023-32315

CVE-2023-32315 GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

CVE-2026-83742

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2021-41773

CVE-2021-41773 — Эксплуатация Path Traversal и RCE в Apache Описание прохождения комнаты TryHackMe "Modern Web Stacks" , посвященной эксплуатации CVE-2021-41773 — уязвимости path traversal в Apache HTTP Server 2.4.49, которая приводит к удаленному выполнению кода при включенном modcgi. Краткая...

spring4shell-local-verification-lab

Spring4Shell 로컬 영향 조건 검증, 수정 및 재테스트 프로젝트 프로젝트 소개 이 프로젝트는 Spring Framework CVE-2022-22965, 즉 Spring4Shell 취약점의 영향 조건, 위험 양상, 수정 방법 및 수정 후 재테스트 절차를 학습하고 검증하기 위한 것입니다. 이 프로젝트는 개인이 구축한 로컬 인가 환경에서 완료되었습니다. 프로젝트의 초점은 실제 대상에 대한 공격이 아니라, 수정 전과 수정 후의 Spring MVC 테스트 환경을 구축하여 취약점 관련 영향 조건을 항목별로 확인하고, 안전하고 통...

CVE-2025-63589

CVE-2025-63589 CMSimpleXH index.php 경로 처리에서의 Reflected XSS 발견일: 2025년 10월 6일 제품: CMSimpleXH 오픈소스 플랫 파일 CMS 영향 받는 버전: 1.8 CVE: CVE-2025-63589 인증 필요: 없음 비인증 공격 유형: 반사형 크로스 사이트 스크립팅 XSS 예상 CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1 Medium index.php의 프론트 컨트롤러는 동적 경로 세그먼트템플릿/페이지 라우팅에 사용됨를 수락...

CVE-2026-83742 wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2026-83742 wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2026-83742

Unsigned integer underflow in wstrncat in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSHRealPath in src/ssh.c...

CVE-2026-83742

The wolfSSL wolfSSH library (versions v1.4.11 through v1.5.0 ) is vulnerable on non-Windows platforms due to an unsigned integer underflow in the wstrncat() function within src/port.c. An authenticated remote attacker can trigger this by sending a crafted SFTP path to wolfSSH_RealPath() in src/ss...

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

ZKTeco BioTime v8.5.5 - Path Traversal

A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. id: CVE-2023-38950 info: name: ZKTeco BioTime v8.5.5 - Path Traversal author: iamnoooob,pdresearch severity: high description: | A pa...

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

QNAP Photo Station - Path Traversal

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. id: CVE-2019-7195 info: name: QNAP Photo Station - Path Traversal author: s4e-io severity: critical description: | QNAP devices running Pho...

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution RCE vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the --templatesPath query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig...

CVE-2026-97671

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2026-44011-poc

CVE-2026-44011: Craft CMS 인증된 RCE PoC 이 Python 스크립트는 Craft CMS 보안 권고문에 설명된 공격을 각색한 것입니다. 인증된 Craft 사용자는 취약한 필드 레이아웃 구성 경로에 접근하여 서버가 명령을 실행하도록 할 수 있습니다. 범위 및 요구 사항 영향을 받는 버전은 Craft CMS =4.0.0, =5.0.0, 5.9.18입니다. 이 스크립트는 두 호스트 모두에서 curl을 필요로 합니다. 서버에서는 Bash를 사용합니다. 서버의 Python3는 대화형 PTY도 제공하며, 이것이 없...

CVE-2025-56499

CVE-2025-56499 Чтение произвольных файлов из-за отсутствия проверки пути в локальном провайдере правил Исправление в апстриме: https://github.com/MetaCubeX/mihomo/pull/2177 Затронутые версии: mihomo = v1.19.11 Краткое описание При разборе конфигурации rule-providers ветвь type = "file" не проверя...

CVE-2025-52691

CVE-2025-52691 SmarterMail: неаутентифицированная произвольная загрузка файлов RCE Обзор Критическая уязвимость неаутентифицированной произвольной загрузки файлов, позволяющая удалённо выполнять код. Поле| Значение ---|--- Продукт| SmarterMail Затронутые| Сборка 9406 и ранее CVSS| 10.0 Критически...