Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Samsung MagicINFO 9 Server - File Upload & Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. id: CVE-2025-4632 info: name: Samsung MagicINFO 9 Server - File Upload & Remote Code Execution author: s4e-i...

CVE-2024-32113-Exploit

CVE-2024-32113 Exploit Apache OFBiz Path Traversal to RCE exploit. Description CVE-2024-32113 is a Path Traversal vulnerability that leads to Remote Code Execution RCE in Apache OFBiz. Vulnerability : Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in...

CVE-2026-18792

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-74850

An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-74850

Synology DiskStation Manager (DSM) is vulnerable to an improper limitation of a pathname to a restricted directory in the contentextract component. This flaw allows remote authenticated users to read specific files. The vulnerability impacts versions before 7.3.2-86009-5 and 7.4.1-90080-1 . No sp...

EUVD-2026-124200

An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-74850

An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-18792

The Synology DiskStation Manager (DSM) is affected by an improper limitation of a pathname to a restricted directory vulnerability within the Sharing API . This flaw exists in versions prior to 7.3.2-86009-5 and 7.4.1-90080-5 . Remote authenticated users can exploit this to read or write arbitrar...

EUVD-2026-124181

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

pathprober

pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...

CVE-2026-18792: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation…

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

PT-2026-145685

An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

PT-2026-145681

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-74850: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology…

An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2022-37706

CVE-2022-37706 Exploit: Enlightenment v0.25.3 Privilege Escalation Description This repository contains an exploit for CVE-2022-37706 , a local privilege escalation vulnerability in Enlightenment v0.25.3 and earlier. The vulnerability exists due to improper handling of pathnames starting with the...

Fortinet FortiManager Improper limitation of a pathname to a restricted directory in apache_mod (FG-IR-26-250)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-250 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiManager Improper limitation of a pathname to a restricted directory (FG-IR-26-237)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-237 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiAnalyzer Improper limitation of a pathname to a restricted directory in apache_mod (FG-IR-26-250)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-250 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiAnalyzer Improper limitation of a pathname to a restricted directory (FG-IR-26-237)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-237 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...