CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 Запуск лабораторной работы CVE-2021-41773-Path Traversal 1. Установите и запустите Docker на вашем ПК/ноутбуке 2. Клонируйте этот репозиторий GitHub 3. Перейдите в папку Path Traversal 4. Введите следующие команды docker build -t...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ VULNÉRABILITÉ CRITIQUE - Exploitation active confirmée CVE-2025-6218 est une vulnérabilité critique de path traversal dans WinRAR qui permet l'exécution de code arbitraire. Actuellement exploitée par des groupes APT comme GOFFEE, Bitter APT-C-08 et...

MikroTik RouterOS Argument Injection (CVE-2026-86060)

RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...

Linux Distros Unpatched Vulnerability : CVE-2026-105221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on- path attackers to intercept HTTPS traffic because...

CVE-2026-105676: Improper Limitation of a Pathname to a Restricted Directory

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

PT-2026-104667

Name of the Vulnerable Software and Affected Versions Legcord versions 1.1.0 through 1.3.0 Description Path traversal exists in theme IPC handlers, allowing scripts running in the Discord origin, such as through Cross-Site Scripting XSS, to escape the themes directory. This occurs due to...

MikroTik RouterOS Path Traversal (CVE-2026-67281)

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file- serving path dereferences...

PT-2026-104818

Name of the Vulnerable Software and Affected Versions LibreOffice Calc versions prior to 26.2.5 Description LibreOffice Calc allows linking a cell range to an external data source, with the link saved within the document. An attacker can specify a Java database driver to be loaded from a remote...

CVE-2026-105286: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

Cisco ASA Path Traversal (CVE-2020-3187)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted...

CVE-2024-46987

CVE-2024-46987 Эксплойт — Path Traversal в Camaleon CMS Этот инструмент эксплуатирует уязвимость Path Traversal в Camaleon CMS CVE-2024-46987. Он позволяет произвольное скачивание файлов и включает автоматическую функцию для попытки получения SSH-ключей у обнаруженных в системе пользователей...

Preproduce-CVE-2021-41773

Воспроизведение CVE 2021-41773 Уязвимость обхода пути и раскрытия файлов в Apache HTTP Server 2.4.49 CVE-2021-41773 POC $ docker compose up Подтверждение работоспособности $ curl -I http://localhost HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 13:25:18 GMT Server: Apache/2.4.49 Unix Last-Modified: Mon,...

CVE-2020-5903

CVE-2020-5902 RCE /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=delete+cli+alias+private+list /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=create+cli+alias+private+list+command+bash...

CVE-2024-38819-POC2

CVE-2024-38819: Доказательство концепции PoC Это доказательство концепции для уязвимости CVE-2024-38819, о которой я сообщил, демонстрирующее эксплуатацию path traversal. Шаги выполнения 1. Соберите Docker-образ Spring Boot 3.3.4, на основе Spring Framework 6.1.13 cd vuln docker build -t...

CVE-2026-105221

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs est un service Git léger et auto-hébergé, similaire à une version privée de GitHub, conçu pour fonctionner facilement sur des serveurs à faible ressources. La vulnérabilité CVE-2025-8110 est une faille de sécurité critique qui permet à un attaquant de contourner les...

CVE-2026-105222 alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets sslverifypeer to FALSE, which is passed to CURLOPTSSLVERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service requests...

CVE-2026-105221 Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because httpconnection in lib/gist.rb sets VERIFYNONE. Attackers can present any certificate to read or modify GitHub API traffic, stealing OAuth tokens...

CVE-2023-23397

CVE-2023-23397 Демонстрация эксплуатации и смягчения 📌 Обзор Этот проект демонстрирует обнаружение, эксплуатацию и смягчение CVE-2023-23397 — критической уязвимости нулевого клика для ретрансляции NTLM в Microsoft Outlook для Windows. Эксплуатируемая через приглашения в календаре, эта уязвимость...

CVE-2023-31718

CVE-2023-31718 Существует возможность включения локальных файлов в конечную точку /api/download. Эта конечная точка предназначена для загрузки отчётов из FUXA и может читать локальные файлы через параметр "name" в HTTP GET. /api/download?cmd=REPORT-DOWNLOAD&name=../../../../../../etc/passwd...