s2-067-CVE-2024-53677

s2-067-CVE-2024-53677 s2-067CVE-2024-53677 Summary File upload logic is flawed, and allows an attacker to enable paths with traversals - similar problem as reported in S2-066 Who should read this All Struts 2 developers and users Impact of vulnerability Remote Code Execution Maximum security rati...

CVE-2026-31802

🛡️ CVE-2026-31802 - Simple Proof of Concept Viewer 📋 About CVE-2026-31802 This repository provides a proof of concept PoC and write-up for CVE-2026-31802. The issue is a security vulnerability in the npm tar package. It allows attackers to trick the software into writing files outside its allowed...

CVE-2021-41773

CVE-2021-41773 A Zeek package which raises notices for Path Traversal/RCE in Apache HTTP Server 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013 References https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-41773 https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-42013...

fortiweb-auth-bypass-check

FortiWeb Auth Bypass Check FortiWeb auth bypass scanner by Bishop Fox Tests a target for authentication bypass CVE-2025-64446 Only exploits a path traversal, does not exploit the actual auth bypass Does not perform any administrative actions on the target For more information about this...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 is a vulnerability in Python’s tarfile module that allows arbitrary file writes outside the extraction directory when extracting untrusted tar archives. The issue occurs when using TarFile.extract or TarFile.extractall with filter="data" or filter="tar", which does...

CVE-2006-3392

CVE-2006-3392 https://www.cvedetails.com/cve/CVE-2006-3392/ Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequence...

EUVD-2026-92385

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

CVE-2026-105286

A path traversal vulnerability exists in the File Upload Handler component of the Totolink A3002MU (version 1.0.0-B20230403.1455). The flaw is located in the sub_44B250 function within the /boafrm/formUploadFile file, where improper validation of the filename argument allows for remote execution ...

CVE-2023-23397

A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...

CVE-2026-104706

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://:8443 via menus Administration - View Logs...

CVE-2026-104806

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

docker-lab-cve-2017-5638-cve-2021-41773

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-based attack emulation lab designed to demonstrate a multi-stage kill chain, lateral movement, and multi-point IDS detection. Overview This lab simulates a realistic network environment where an attacker progresses from initial...

CVE-2020-0618_DETECTION

CVE-2020-0618 - Microsoft SQL Server Reporting Services SSRS RCE Detection PoC 📜 Description This is a simple PoC to detect CVE-2020-0618 , a Remote Code Execution vulnerability affecting Microsoft SQL Server Reporting Services SSRS. The vulnerability exists due to improper path validation in the...

CVE-2025-6218-POC

RARLAB WinRAR 디렉터리 트래버설 원격 코드 실행 취약점. 이 취약점으로 인해 원격 공격자는 RARLAB WinRAR의 영향을 받는 설치본에서 임의 코드를 실행할 수 있습니다. 이 취약점을 악용하려면 사용자 상호 작용이 필요하며, 대상이 악성 페이지를 방문하거나 악성 파일을 열어야 합니다. 구체적인 결함은 압축 파일 내의 파일 경로 처리에 존재합니다. 조작된 파일 경로로 인해 프로세스가 의도하지 않은 디렉터리로 트래버설할 수 있습니다. 공격자는 이 취약점을 이용하여 현재 사용자의 컨텍스트에서 코드를 실행할 수 있습니다...

PwnKit-Exploit

PwnKit-Exploit CVE-2021-4034 @c0br40x help to make this section in README!! Proof of Concept debian@debian:/PwnKit-Exploit$ make cc -Wall exploit.c -o exploit debian@debian:/PwnKit-Exploit$ whoami debian debian@debian:/PwnKit-Exploit$ ./exploit Current User before execute exploit...

CVE-2024-53677-Docker

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code executio...

CVE-2026-104853

A flaw was found in Nx. During migration planning, the application reads migration file paths from package manifests without validating that they remain within the intended directory. An attacker supplying a malicious package dependency can exploit this path traversal issue using directory...

CVE-2026-104810 Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443, under Maintenance → File Management →...

CVE-2026-104810

Mitel MiVoice Office 400 is affected by a path traversal vulnerability in the web portal (TCP port 443) specifically within the Maintenance → File Management → File Browser section. An authenticated attacker can exploit this flaw to access and delete sensitive files outside the intended directory...

CVE-2019-17658

Unquoted Service Path exploit in FortiClient CVE-2019-17658 FortiClient for Windows prior to 6.2.3 is vulnerable to an unquoted service path vulnerability. That may allow an attacker to gain elevated privileges via the FortiClientConsole executable service path. Base Score: 9.8 Vector:...