CVE-2026-104853

A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810

Mitel MiVoice Office 400 is affected by a path traversal vulnerability in the web portal (TCP port 443) specifically within the Maintenance → File Management → File Browser section. An authenticated attacker can exploit this flaw to access and delete sensitive files outside the intended directory...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2019-17658

Exploit del percorso di servizio non racchiuso tra virgolette in FortiClient CVE-2019-17658 FortiClient per Windows precedente alla versione 6.2.3 è vulnerabile a una vulnerabilità del percorso di servizio non racchiuso tra virgolette. Ciò può consentire a un attaccante di ottenere privilegi...

CVE-2026-104806

The Mitel MiVoice Office 400 System is vulnerable to a path traversal flaw in the web management portal (TCP port 443) within the Maintenance → System Logs functionality. Due to insufficient validation of user-supplied file paths, an attacker with high privileges can traverse the directory struct...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

EUVD-2026-92293

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

EUVD-2026-92289

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706

The Mitel MiVoice Office 400 system is affected by a path traversal vulnerability (CWE-31). This flaw allows an attacker with high privileges to view or download sensitive system files via the portal at https://:8443 specifically through the Administration -> View Logs menu. The vulnerability ...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2025-52691-poc

CVE-2025-52691 POC Prova di concetto per CVE-2025-52691 - SmarterMail Caricamento arbitrario di file non autenticato RCE ⚠️ Disclaimer Solo per test di sicurezza autorizzati e scopi educativi. L'accesso non autorizzato è illegale. Panoramica Vulnerabilità critica in SmarterMail che consente il...

Mini_httpd-CVE-2018-18778

Vulnerabilità di lettura arbitraria dei file in minihttpd CVE-2018-18778 Minihttpd è un server HTTP miniaturizzato che, pur occupando poche risorse di sistema, mantiene un certo livello di prestazioni circa il 90% di Apache. Per questo motivo è ampiamente utilizzato come server embedded in vari...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName path traversal Proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-google-storage 4.18.2 Camel Quarkus|...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 Uno scanner automatico per Apache 2.4.49 • esegui: go run main.go OPPURE go build main.go && ./main • puoi personalizzare il tuo payload • gli host vulnerabili vengono salvati Crea il tuo lab: 1. Tira l'immagine: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Eseg...

CVE-2024-50986

CVE-2024-50986: DLL-Hijacking-Exploit für Clementine Beschreibung: Ein Problem in Clementine v.1.3.1 ermöglicht einem lokalen Angreifer, beliebigen Code über eine manipulierte DLL-Datei auszuführen. Betroffene Version: Clementine v.1.3.1 Forscher: Utkarsh r1971d3 LinkedIn NIST CVE-Link:...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC Questo repository contiene una proof of concept benigna per CVE-2026-36227, un problema di path traversal nella gestione della registrazione utente di Easy Chat Server 3.1. Questo repository è destinato esclusivamente a ricerca di...