F5-BIG-IP

CVE-2020-5902 — RCE F5 BIG-IP TMUI Preuve de concept pour la vulnérabilité critique de traversée de chemin / exécution de code à distance dans l'interface utilisateur de gestion du trafic TMUI de F5 BIG-IP. ⚠️ Réservé aux tests d'intrusion autorisés et à la recherche en sécurité. Toute utilisation...

CVE-2026-49049

Analyse de la vulnérabilité CVE-2026-49049 : Unauthenticated Arbitrary File Write dans JoomShaper Helix3 Joomla Ce dépôt contient des documents, une analyse technique et un Proof of Concept PoC pour la vulnérabilité critique CVE-2026-49049 , découverte dans l'ancien framework de templates Helix3 ...

CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal

CVE-2025-8088: ثغرة تجاوز المسار ليوم الصفر في WinRAR — من الصفر إلى الاختراق 🗿 مقدمة – تم القبض على "الصديق القديم" وهو يتراخى WinRAR — الكلاسيكي المغبر الذي يمتلكه الجميع ولكن لا أحد يحدّثه — تمت معاقبته للتو بثغرة يوم صفر عالية الخطورة : CVE-2025-8088. الخطورة: CVSS v3.1 ← 8.8 عالية تم استغلال...

CVE-2025-8088

POC pour CVE 2025-8088 WinRAR versions antérieures à 7.13 présente une vulnérabilité de traversée de chemin, ce qui peut conduire à des shells distants persistants. Nous allons utiliser la traversée de chemin pour placer un binaire dans le dossier de démarrage lors de l'extraction du .rar à...

httpd-2.4.49

httpd-2.4.49 حرج: اجتياز المسار وتنفيذ التعليمات البرمجية عن بُعد في Apache HTTP Server 2.4.49 و2.4.50 إصلاح غير مكتمل لـ CVE-2021-41773 CVE-2021-42013...

CLEANSTART-2026-YE75739 Previously, resolving relative paths containing parent directory ('

Security vulnerability affects the temporal-server package. Previously, resolving relative paths containing parent directory '...

CLEANSTART-2026-IV86887 Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

Security vulnerability affects the rundeck package. Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through...

CVE-2026-9290

CVE-2026-9290 — Exploitation LFI vers RCE dans WP User Manager Traversée de chemin pré-authentifiée via le paramètre 'tab' → Inclusion de fichier local Aperçu CVE-2026-9290 est une vulnérabilité de haute sévérité CVSS 7.5 d'inclusion de fichier local non authentifiée dans le plugin WordPress WP...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 كيفية تشغيل مختبر CVE-2021-41773-Path Traversal 1. قم بتثبيت وتشغيل Docker على جهاز الكمبيوتر/اللابتوب الخاص بك 2. استنساخ هذا المستودع من GitHub 3. انتقل إلى مجلد Path Traversal 4. أدخل الأوامر التالية docker build -t cve-2021-41773-path-traversal . و...

PT-2026-107207

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...

PT-2026-106821

Name of the Vulnerable Software and Affected Versions @quasar/icongenie versions prior to 6.1.1 Description The icongenie generate --profile command fails to constrain the resolved destination to the Quasar project directory when processing folder and name values from a user-supplied profile. The...

PT-2026-107267

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-bitbucket-cloud versions prior to 0.3.10 @backstage/plugin-scaffolder-backend-module-bitbucket-server versions prior to 0.2.25 Description Bitbucket pull-request Scaffolder actions fail to sufficient...

PT-2026-106725

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

PT-2026-107203

🚨 CVE-2026-79805 CVSS 9.8 Critical A path traversal flaw in HPE ClearPass Policy Manager allows remote attackers to read and overwrite sensitive OS files, leading to system compromise. https://t.co/AuVFW8JRTI https://t.co/jsTxIa6pL3...

CVE-2026-98201: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: zero ffeffect before compat copy in inputffeffectfromuser In the compat path inputffeffectfromuser aliases the caller's native struct ffeffect with the smaller struct ffeffectcompat and copies only the compat sized prefix:...

Linux Distros Unpatched Vulnerability : CVE-2026-98255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to th...

PT-2026-106684

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if init path errors, the callee tries to clean up with rtrs clt close conns. However, this can lead to calling the event tracing code with clt path-kobj-name being NULL and...

PT-2026-106752

Name of the Vulnerable Software and Affected Versions Microsoft.OpenApi.Kiota versions 1.25.1 through 1.34.1 Microsoft.OpenApi.Kiota.Builder versions 1.25.1 through 1.34.1 Description Kiota, an OpenAPI based HTTP Client code generator, fails to validate the x-ai-capabilities.response...

PT-2026-107289

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with security IMPORT LOCAL PATHS = true, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the...

CVE-2026-98255: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...