CVE-2026-54054 Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects

Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, POST /api/files/url, is vulnerable to Server-Side Request Forgery SSRF. The HTTP downloader used by this endpoint fetches user-supplied URLs with redirects...

CVE-2026-54054

Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0 , its URL import endpoint (POST /api/files/url) is vulnerable to full-read SSRF . The HTTP downloader fetches user-supplied URLs with redirects enabled and does not validate whether the targ...

dirtypipe2

dirtypipe2 Linux Kernel 5.8 5.15.25 - Local Privilege Escalation DirtyPipe 2 Exploit Author: Antonius w1sdom github : https://github.com/bluedragonsecurity web : https://www.bluedragonsec.com tested on : linux kernel 5.13.0-21-generic compiled on lubuntu 20.04.5 linux lubuntu 20.04.2 - linux kern...

CVE-2026-49836

psd-tools (Python library for Adobe Photoshop PSD files) is vulnerable to arbitrary file write and arbitrary file read via unsanitized smart-object paths. In all releases through v1.17.0 , SmartObject.save() uses the embedded filename from the PSD verbatim—no basename, no .. filtering, no absolut...

CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename

psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...

Cisco-ASA-FTD-Web-Services-Traversal

Cisco自适应安全设备软件和Firepower威胁防御软件Web服务路径遍历漏洞 CVE-2020-3452 用法：CVE-2020-3452.py https://target 漏洞描述：Cisco自适应安全设备（ASA）软件和Firepower威胁防御（FTD）软件的Web服务接口中存在一个漏洞，可能允许未经身份验证的远程攻击者执行目录遍历攻击并读取目标系统上的敏感文件。 示例输出： root@kitploit: ➜ Cisco-ASA-FTD-Web-Services-Traversal git:main ✗ python CVE-2020-3452.py...

CVE-2024-23897

CVE-2024-23897 此仓库提供了 CVE-2024-23897（由 SonarSource 发现）的概念验证代码。 CVE-2024-23897 | Jenkins 中的文件读取 免责声明 此代码是该漏洞的概念验证，我并不鼓励任何人将其用于他们不拥有的 Confluence 实例。 此工具仅用于研究和教育目的，我不会对您使用它所产生的任何后果负责。 描述 根据 Jenkins 安全公告 2024-01-24： Jenkins 在处理 CLI 命令时，使用 args4j 库来解析 Jenkins 控制器上的命令参数和选项。该命令解析器有一个特性，可以将参数中的 @...

CVE-2026-79725 Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control...

CVE-2026-79725

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by an improper access control flaw (CWE-284 ) that allows a remote authenticated attacker to read arbitrary files. The vulnerability is part of a broader set of storage-path issues: the flow execution runtime accepts attacker-controlled ...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 - 通过 CLI 的任意文件读取漏洞可能导致远程代码执行（RCE） 受影响的产品和版本： 产品| 受影响的版本 ---|--- Jenkis Server| = 2.441 = LTS 2.426.3 CVSS： 严重 活跃利用： 是 补丁： 是 缓解措施： 是 帮助 root@kitploit: usage: CVE-2024-23897.py -h -c COUNTRY options: -h, --help show this help message and exit -c COUNTRY, --country...

CVE-2024-9264

🚨 CVE-2024-9264 - Grafana SQL注入导致远程代码执行（RCE）和文件读取 针对CVE-2024-9264的利用工具，Grafana中的一个关键漏洞 ，允许认证的攻击者执行SQL查询导致RCE 🛡️ 此工具严格用于教育目的 和授权的渗透测试 。 未经授权的使用是非法且不道德的。 🧠 漏洞概述 🕳️ 什么是CVE-2024-9264？ CVE-2024-9264 是Grafana中的一个关键缺陷，允许认证的攻击者执行SQL命令，导致RCE和文件读取 🧬 根本原因 不充分的清理。 💥 影响 RCE ：执行任意命令，获取反弹shell，或读取敏感文件。 高严重性...

CVE-2026-21857

CVE-2026-21857: Redaxo tiene un Path Traversal en el addon de Backup que conduce a la lectura arbitraria de archivos Información general...

CVE-2026-9225

IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in the File/Read File component. When executing flows through the /api/v1/run/advanced/flowid endpoint, the application allows...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

GHSA-QGPW-8G46-W95V n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

NPM: n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

NPM: n8n: Git Node branch..remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

Grafana-CVE-2021-43798Exp

Grafana V8. Arbitrary File Read Exp -- Multi-threaded Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is often used as a visualization tool for time series data and application analysis of infrastructure, and is also widel...

CVE-2017-12617

CVE-2017-12617 CVE-2017-12617 是 Apache Tomcat 中发现的一个严重远程代码执行（RCE）漏洞 影响那些启用了HTTP PUT的系统（通过将Default servlet的“read-only”初始化参数设置为“false”）受到威胁。 在9.0.1（Beta）、8.5.23、8.0.47和7.0.82之前的Tomcat版本中，如果默认servlet配置了参数readonly设置为false，或者WebDAV servlet启用了参数readonly设置为false，则所有操作系统上都会存在一个潜在危险的远程代码执行（RCE）漏洞。 Apache...

CVE-2001-0931

CVE-2001-0931 Vulnerabilidad de salto de directorio en Cooolsoft PowerFTP Server 2.03 permite a atacantes listar o leer archivos y directorios arbitrarios mediante .. punto punto en 1 LS o 2 GET. Publicación de SecurityFocus en https://www.securityfocus.com/bid/3593/info Publicación de Securiteam...