CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

CVE-2021-31800 - Impacket SMB Server: произвольное чтение и запись файлов Вектор CVSS : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Оценка CVSS : 9.9 Критический Описание Обход пути в smbserver.py позволяет злоумышленнику читать и записывать произвольные файлы на сервере. Подробное объяснение эт...

CVE-2026-102255

A pre-authentication Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 appliance (models 6210, 7210, and 8200v ) due to an unintended forward-proxy alternate access path in the Work Place interface . An unauthenticated remote attacker can exploit this to force the a...

CVE-2026-54520

CVE-2026-54520 ai-agent-automation workflow file step path traversal allowed read/write outside the expected directory. Avis principal : GHSA-cm8g-8jfq-887p Crédit du chercheur : @chaitanyagarware En un coup d'œil Champ| Valeur ---|--- CVE| CVE-2026-54520 GHSA| GHSA-cm8g-8jfq-887p Projet|...

EUVD-2026-94321

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-41958

A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version: dev (commit 38b21f78)). By providing a crafted URL to trigger the functionality, an attacker can use a specially crafted .zip file to achieve arbitrary file write . No specific remedi...

CVE-2026-41958

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-41958

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version: dev (commit 38b21f78)). By providing a specially crafted .eml file , an attacker can trigger this vulnerability to achieve arbitrary file write . The provided documents do not include specifi...

EUVD-2026-94320

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-35204

CVE-2026-35204 Этот репозиторий представляет собой PoC для CVE-2026-35204 Описание "Helm — это менеджер пакетов для Charts в Kubernetes. В версиях от 4.0.0 до 4.1.3 специально созданный плагин Helm при установке или обновлении заставляет Helm записывать содержимое плагина в произвольное место...

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crow...

cve-2026-87902-wordpress-lfi-lab

CVE-2026-87902 / GHSA-7hp8-65ch-5whp — неаутентифицированный LFI в WordPress getpagetemplate → условный RCE Лаборатория для воспроизведения + сканер списка URL + PoC, собранные и проверенные end-to-end на подлинных WordPress 7.1.1 уязвимая и 7.1.2 исправленная в Docker-лаборатории. Advisory:...

CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal

🚨 CVE-2026-87902: Обход пути без аутентификации в ядре WordPress и устранение RCE 🔴 Смотрите полный разбор и руководство по устранению: 👉 Нажмите здесь, чтобы посмотреть на YouTube 📖 Обзор Этот репозиторий содержит экстренные справочные заметки, правила защиты веб-сервера и конфигурации усиления...

BIT-JOOMLA-2026-90915 Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...

CVE-2026-92533

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

EUVD-2026-94285

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92533 Path Traversal in BugTracker.NET

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92533

A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...