CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706

The Mitel MiVoice Office 400 system is affected by a path traversal vulnerability (CWE-31). This flaw allows an attacker with high privileges to view or download sensitive system files via the portal at https://:8443 specifically through the Administration -> View Logs menu. The vulnerability ...

EUVD-2026-92289

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2025-52691-poc

CVE-2025-52691 POC Proof of Concept for CVE-2025-52691 - SmarterMail Unauthenticated Arbitrary File Upload RCE ⚠️ Disclaimer For authorized security testing and educational purposes only. Unauthorized access is illegal. Overview Critical vulnerability in SmarterMail allowing unauthenticated...

Mini_httpd-CVE-2018-18778

minihttpd Arbitrary File Read Vulnerability CVE-2018-18778 Minihttpd is a miniature HTTP server that can maintain a certain level of performance about 90% of Apache while occupying minimal system resources. Therefore, it is widely used as an embedded server in various IoT devices routers, switche...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-google-storage 4.18.2 Camel...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 A automatic scanner to apache 2.4.49 • run: go run main.go OR go build main.go && ./main • you can customize your payload • vulnerable hosts are saved Make your lab: 1. Pull Image: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Run Image: sudo docker run -dit -p...

CVE-2024-50986

CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC This repository contains a benign proof of concept for CVE-2026-36227, a path traversal issue in Easy Chat Server 3.1 user registration handling. This repository is for authorized security research and local reproduction only. Do no...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Mass Exploit for Fortinet FortiOS SSL VPN A tool for mass exploitation of the CVE-2018-13379 path traversal vulnerability in Fortinet FortiOS SSL VPN. Allows reading session files and extracting logins and passwords in cleartext. Features Exploitation of CVE-2018-13379 via the...

cve-2024-38819-lab

CVE-2024-38819 Customer Vault Lab This is a Cloud Foundry-ready Spring Boot demo for CVE-2024-38819, a Spring Framework path traversal vulnerability in functional static resource handling. What Is Patched? CVE-2024-38819 is patched in Spring Framework , not directly in Spring Boot. Spring Boot is...

CVE-2025-24054

Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure 🎥 Demonstration POC + March 2025 Patch bypass 🎥 patch bypass Click the image above to watch the vulnerability demonstration 📋 Technical Overview This repository provides a comprehensive research framework analyzing the vulnerability chai...

CVE-2025-8088-Winrar

CVE-2025-8088 WinRAR Exploitation Advanced WinRAR Path Traversal Exploitation Tool A sophisticated GUI tool for creating malicious RAR files that exploit the WinRAR path traversal vulnerability CVE-2025-8088 by manipulating ADS and RAR5 headers. Features ADS Exploitation - NTFS alternate data...

CVE-2026-5203

CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple ≤ 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator to upload arbitrary files e.g. PHP web shells...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal & Arbitrary File Write Authenticated This repository contains a Proof of Concept PoC exploit for CVE-2026-6815, an arbitrary file write and path traversal vulnerability in Casdoor. The vulnerability has been fixed in version 3.54.1...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - Authenticated RCE in Chyrp Lite ≤ 2026.01 "Iriomote" Chained attack: uploadspath blocklist bypass CVE-2026-53768 + missing file extension validation in adminupdateupload CVE-2026-53767 → Remote Code Execution as www-data Overview Chyrp Lite ≤...

CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read For authorized penetration testing and Red Team operations only. Unauthorized use constitutes a criminal offense. See Legal Notice. Overview CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability in GitLab Community and Enterprise...