CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

CVE-2021-31800 - Impacket SMB 서버 임의 파일 읽기/쓰기 CVSS 벡터 : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 점수 : 9.9 심각 설명 smbserver.py에 존재하는 경로 탐색path traversal 취약점으로 인해 공격자가 서버의 임의 파일을 읽거나 쓸 수 있습니다. 이 문제에 대한 자세한 설명: https://checkmarx.com/blog/cve-2021-31800-how-we-used-impacket-to-hack-itself/ 사용법...

CVE-2026-102255

A pre-authentication Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 appliance (models 6210, 7210, and 8200v ) due to an unintended forward-proxy alternate access path in the Work Place interface . An unauthenticated remote attacker can exploit this to force the a...

CVE-2026-54520

CVE-2026-54520 ai-agent-automation 워크플로우 파일 단계의 경로 탐색 취약점으로 인해 예상 디렉토리 외부에서 읽기/쓰기가 가능했습니다. 기본 권고: GHSA-cm8g-8jfq-887p 연구자 크레딧: @chaitanyagarware 한눈에 보기 필드| 값 ---|--- CVE| CVE-2026-54520 GHSA| GHSA-cm8g-8jfq-887p 프로젝트| vmDeshpande/ai-agent-automation 패키지| backend 생태계| npm 심각도| High CVSS| 8.1,...

EUVD-2026-94321

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-41958

A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version: dev (commit 38b21f78)). By providing a crafted URL to trigger the functionality, an attacker can use a specially crafted .zip file to achieve arbitrary file write . No specific remedi...

CVE-2026-41958

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-41958

A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version: dev (commit 38b21f78)). By providing a specially crafted .eml file , an attacker can trigger this vulnerability to achieve arbitrary file write . The provided documents do not include specifi...

EUVD-2026-94320

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-35204

CVE-2026-35204 Этот репозиторий представляет собой PoC для CVE-2026-35204 Описание "Helm — это менеджер пакетов для Charts в Kubernetes. В версиях от 4.0.0 до 4.1.3 специально созданный плагин Helm при установке или обновлении заставляет Helm записывать содержимое плагина в произвольное место...

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

Overview On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crow...

cve-2026-87902-wordpress-lfi-lab

CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress getpagetemplate 未認証LFI → 条件付きRCE 再現ラボ + URLリストスキャナ + PoC。Dockerラボ上の正規のWordPress 7.1.1（脆弱） および 7.1.2（修正済み） に対して構築し、エンドツーエンドで検証済み 。 アドバイザリ: https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp 種別: CWE-98...

CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-traversal

🚨 CVE-2026-87902: WordPress Core 未認証のパストラバーサル & RCE 緩和策 🔴 詳細解説 & 緩和チュートリアルを視聴: 👉 YouTubeで視聴するにはここをクリック 📖 概要 このリポジトリは、CVE-2026-87902 CVSS 9.2 クリティカル の技術分析で扱った緊急参照ノート、Webサーバー緩和ルール、およびハードニング設定を提供します。 CVE-2026-87902 は WordPress Core バージョン 4.7.0 から 7.1.1 に影響します。未認証のリモート攻撃者がテーマテンプレート解決関数 locatetemplate...

BIT-JOOMLA-2026-90915 Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260905 - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of the cache group name allowed path traverals in the file storage of the caching layer, resulting in arbitrary directory deletions...

CVE-2026-92533

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

EUVD-2026-94285

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92533 Path Traversal in BugTracker.NET

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...

CVE-2026-92533

A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...