1974 matches found
CVE-2025-64446-PoC---FortiWeb-Path-Traversal
CVE-2025-64446 PoC - FortiWeb Path Traversal Description Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb CVE-2025-64446 that allows execution of administrative commands. Technical Details CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...
CVE-2018-11235
PoC exploit for CVE-2018-11235 GitHub is not allowing me to push a repository exploiting the vulnerability good point for them, so you will have to build it yourself by running the build.sh script. Then, push the repository somewhere. When you clone it with the --recurse-submodules flag, the evil...
fortinet-fortiweb-cve-2025-64446-58034
Understanding Fortinet FortiWeb Vulnerabilities CVE-2025-64446, CVE-2025-58034 1. Overview Fortinet FortiWeb is a Web Application Firewall WAF device widely deployed in enterprise systems to protect web applications from common threats. Since FortiWeb typically sits at a central protection layer,...
CVE-2026-124726
Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before...
EUVD-2026-125675
Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before...
CVE-2026-124726 Apache APISIX: openapi-to-mcp tool call can reach an API path the document does not declare
Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before...
CVE-2026-124726
Apache APISIX versions 3.19.0 before 3.20.0 are vulnerable to a Relative Path Traversal and Unintended Proxy vulnerability. A caller of the MCP endpoint can bypass the OpenAPI document's declared limits to invoke undeclared endpoints using the HTTP method of a declared tool and the credentials ad...
PT-2026-147044
Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before...
PT-2026-146868
In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration example contains a relative path traversal vulnerability that could allow an attacker to read files outside of the chat attachments folder that are within the server's filesystem scope...
CVE-2026-111435
Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...
CVE-2026-111435
The openEuler iSulad tool on Linux (versions through 2.1.6 ) is vulnerable to a relative path traversal vulnerability in the src/daemon/modules/image/oci/oci_load.c file. The root cause is that the oci_load_process_manifest() function fails to sanitize the Config path of manifest.json. An attacke...
CVE-2026-111435
Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...
CVE-2026-111435
Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...
CVE-2026-111435: openEuler iSulad: Relative path traversal vulnerability in openEuler iSulad on Linux
Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...
CVE-2026-118213
Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network...
CVE-2026-113818
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network...
CVE-2026-112762
Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-105505
Relative path traversal in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2026-118213
A relative path traversal vulnerability in Windows Deployment Services allows an unauthorized attacker to disclose information over a network. This flaw resides in the Windows Deployment Services component and impacts the confidentiality of system information. Remediation is available through off...