141198 matches found
CVE-2020-0618_DETECTION
CVE-2020-0618 - Microsoft SQL Server Reporting Services SSRS RCE Detection PoC 📜 Description This is a simple PoC to detect CVE-2020-0618 , a Remote Code Execution vulnerability affecting Microsoft SQL Server Reporting Services SSRS. The vulnerability exists due to improper path validation in the...
CVE-2026-104853
A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory...
CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability
This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...
CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability
This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...
CVE-2026-104810
Mitel MiVoice Office 400 is affected by a path traversal vulnerability in the web portal (TCP port 443) specifically within the Maintenance → File Management → File Browser section. An authenticated attacker can exploit this flaw to access and delete sensitive files outside the intended directory...
CVE-2019-17658
Unquoted Service Path exploit in FortiClient CVE-2019-17658 FortiClient for Windows prior to 6.2.3 is vulnerable to an unquoted service path vulnerability. That may allow an attacker to gain elevated privileges via the FortiClientConsole executable service path. Base Score: 9.8 Vector:...
CVE-2026-104806
The Mitel MiVoice Office 400 System is vulnerable to a path traversal flaw in the web management portal (TCP port 443) within the Maintenance → System Logs functionality. Due to insufficient validation of user-supplied file paths, an attacker with high privileges can traverse the directory struct...
CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...
EUVD-2026-92293
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...
CVE-2026-104806 Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure
DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...
CVE-2026-104706
The Mitel MiVoice Office 400 system is affected by a path traversal vulnerability (CWE-31). This flaw allows an attacker with high privileges to view or download sensitive system files via the portal at https://:8443 specifically through the Administration -> View Logs menu. The vulnerability ...
CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...
EUVD-2026-92289
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...
CVE-2026-104706 Mitel MiVoice Office 400 view system files path traversal
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...
CVE-2025-52691-poc
CVE-2025-52691 إثبات المفهوم إثبات المفهوم لـ CVE-2025-52691 - رفع ملفات عشوائي بدون مصادقة في SmarterMail يؤدي إلى تنفيذ الأوامر عن بُعد RCE ⚠️ إخلاء مسؤولية للاستخدام المصرّح به في الاختبارات الأمنية والأغراض التعليمية فقط. الوصول غير المصرّح به غير قانوني. نظرة عامة ثغرة حرجة في SmarterMail تسم...
Mini_httpd-CVE-2018-18778
minihttpd Arbitrary File Read Vulnerability CVE-2018-18778 Minihttpd is a miniature HTTP server that can maintain a certain level of performance about 90% of Apache while occupying minimal system resources. Therefore, it is widely used as an embedded server in various IoT devices routers, switche...
CVE-2023-50164-PoC
CVE-2023-50164 PoC This repository is a proof of concept PoC of the CVE-2023-50164 vulnerability. 1. About CVE-2023-50164 CVE-2023-50164 is a file path traversal vulnerability that occurs in Apache Struts web application. An attacker could exploit this vulnerability to upload malicious file...
CVE-2026-66907
CVE-2026-66907 — camel-google-storage downloadFileName path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-google-storage 4.18.2 Camel...
Scanner-CVE-2021-41773
Scanner-CVE-2021-41773 A automatic scanner to apache 2.4.49 • run: go run main.go OR go build main.go && ./main • you can customize your payload • vulnerable hosts are saved Make your lab: 1. Pull Image: sudo docker pull blueteamsteve/cve-2021-41773:no-cgid 2. Run Image: sudo docker run -dit -p...
CVE-2024-50986
CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...