CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810

Mitel MiVoice Office 400 is affected by a path traversal vulnerability in the web portal (TCP port 443) specifically within the Maintenance → File Management → File Browser section. An authenticated attacker can exploit this flaw to access and delete sensitive files outside the intended directory...

CVE-2019-17658

استغلال مسار خدمة غير مُقتبس Unquoted Service Path في FortiClient CVE-2019-17658 FortiClient لنظام التشغيل Windows الإصدارات السابقة للإصدار 6.2.3 معرّضة لثغرة مسار الخدمة غير المُقتبس unquoted service path. وقد تسمح هذه الثغرة للمهاجم بالحصول على صلاحيات مرتفعة عبر مسار خدمة الملف التنفيذي...

CVE-2026-104806

The Mitel MiVoice Office 400 System is vulnerable to a path traversal flaw in the web management portal (TCP port 443) within the Maintenance → System Logs functionality. Due to insufficient validation of user-supplied file paths, an attacker with high privileges can traverse the directory struct...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

EUVD-2026-92293

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2026-104706

The Mitel MiVoice Office 400 system is affected by a path traversal vulnerability (CWE-31). This flaw allows an attacker with high privileges to view or download sensitive system files via the portal at https://:8443 specifically through the Administration -> View Logs menu. The vulnerability ...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

EUVD-2026-92289

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2025-52691-poc

CVE-2025-52691 إثبات المفهوم إثبات المفهوم لـ CVE-2025-52691 - رفع ملفات عشوائي بدون مصادقة في SmarterMail يؤدي إلى تنفيذ الأوامر عن بُعد RCE ⚠️ إخلاء مسؤولية للاستخدام المصرّح به في الاختبارات الأمنية والأغراض التعليمية فقط. الوصول غير المصرّح به غير قانوني. نظرة عامة ثغرة حرجة في SmarterMail تسم...

Mini_httpd-CVE-2018-18778

minihttpd Arbitrary File Read Vulnerability CVE-2018-18778 Minihttpd is a miniature HTTP server that can maintain a certain level of performance about 90% of Apache while occupying minimal system resources. Therefore, it is widely used as an embedded server in various IoT devices routers, switche...

CVE-2023-50164-PoC

CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...

CVE-2026-66907

CVE-2026-66907 — camel-google-storage downloadFileName traversée de chemin Reproducteurs de preuve de concept exécutables pour la même vulnérabilité Apache Camel, un par runtime : Runtime| Répertoire| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-google-stora...

Scanner-CVE-2021-41773

Scanner-CVE-2021-41773 ماسح تلقائي لأباتشي 2.4.49 • تشغيل: go run main.go أو go build main.go && ./main • يمكنك تخصيص الحمولة الخاصة بك • يتم حفظ المضيفين المعرضين للخطر أنشئ مختبرك: 1. سحب الصورة: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. تشغيل الصورة: sudo docker run -dit -p...

CVE-2024-50986

CVE-2024-50986: استغلال اختطاف DLL في Clementine الوصف: يحتوي Clementine الإصدار 1.3.1 على ثغرة تسمح لمهاجم محلي بتنفيذ تعليمات برمجية عشوائية عبر ملف DLL مصمم بعناية. الإصدار المتأثر: Clementine v.1.3.1 الباحث: Utkarsh r1971d3 LinkedIn رابط NIST CVE: https://nvd.nist.gov/vuln/detail/CVE-2024-509...

CVE-2026-36227

CVE-2026-36227: PoC de traversée de chemin UserName dans Easy Chat Server 3.1 Ce dépôt contient une preuve de concept bénigne pour CVE-2026-36227, un problème de traversée de chemin dans la gestion des inscriptions utilisateur d'Easy Chat Server 3.1. Ce dépôt est destiné uniquement à la recherche...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — استغلال جماعي لثغرة Fortinet FortiOS SSL VPN أداة للاستغلال الجماعي لثغرة CVE-2018-13379 عبور المسار في Fortinet FortiOS SSL VPN. تسمح بقراءة ملفات الجلسات واستخراج أسماء المستخدمين وكلمات المرور بنص واضح. الميزات استغلال CVE-2018-13379 عبر نقطة النهاية /remote/fgtlang تعدد الخيو...