CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 هي ثغرة في وحدة tarfile في بايثون تسمح بكتابة ملفات عشوائية خارج دليل الاستخراج عند استخراج أرشيفات tar غير موثوقة. تحدث المشكلة عند استخدام TarFile.extract أو TarFile.extractall مع filter="data" أو filter="tar"، والتي لا تمنع بشكل كامل اجتياز المسار من خلال أعضاء...

CVE-2026-105286 Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

CVE-2026-105286

A path traversal vulnerability exists in the File Upload Handler component of the Totolink A3002MU (version 1.0.0-B20230403.1455). The flaw is located in the sub_44B250 function within the /boafrm/formUploadFile file, where improper validation of the filename argument allows for remote execution ...

EUVD-2026-92385

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

CVE-2026-104706

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104806

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

docker-lab-cve-2017-5638-cve-2021-41773

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 Un laboratoire d'émulation d'attaques basé sur Docker avec 7 hôtes, conçu pour démontrer une kill chain en plusieurs étapes, le mouvement latéral et la détection IDS multi-points. Vue d'ensemble Ce laboratoire simule un environnement réseau réaliste da...

CVE-2020-0618_DETECTION

CVE-2020-0618 - إثبات مفهوم للكشف عن RCE في Microsoft SQL Server Reporting Services SSRS 📜 الوصف هذا إثبات مفهوم بسيط لكشف CVE-2020-0618 ، وهي ثغرة تنفيذ تعليمات برمجية عن بُعد تؤثر على Microsoft SQL Server Reporting Services SSRS. توجد الثغرة بسبب التحقق غير السليم من المسار في واجهة برمجة...

CVE-2026-104853

A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810

Mitel MiVoice Office 400 is affected by a path traversal vulnerability in the web portal (TCP port 443) specifically within the Maintenance → File Management → File Browser section. An authenticated attacker can exploit this flaw to access and delete sensitive files outside the intended directory...

CVE-2019-17658

استغلال مسار خدمة غير مُقتبس Unquoted Service Path في FortiClient CVE-2019-17658 FortiClient لنظام التشغيل Windows الإصدارات السابقة للإصدار 6.2.3 معرّضة لثغرة مسار الخدمة غير المُقتبس unquoted service path. وقد تسمح هذه الثغرة للمهاجم بالحصول على صلاحيات مرتفعة عبر مسار خدمة الملف التنفيذي...

CVE-2026-104806

The Mitel MiVoice Office 400 System is vulnerable to a path traversal flaw in the web management portal (TCP port 443) within the Maintenance → System Logs functionality. Due to insufficient validation of user-supplied file paths, an attacker with high privileges can traverse the directory struct...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

EUVD-2026-92293

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104706

The Mitel MiVoice Office 400 system is affected by a path traversal vulnerability (CWE-31). This flaw allows an attacker with high privileges to view or download sensitive system files via the portal at https://:8443 specifically through the Administration -> View Logs menu. The vulnerability ...

EUVD-2026-92289

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...