Vitejs-exploit

Vite Exploit CVE-2025-31125 Beschreibung: Nutzt den Path-Traversal-Schwachstelle im @fs-Endpunkt des Vite Development Servers CVE-2025-31125 aus, um über manipulierte URLs auf sensible Dateien wie /etc/passwd und /etc/hosts zuzugreifen. Erstellt von Muhammad Waseem. Verwendung: python...

CVE-2022-44311

Descrizione per CVE-2022-44311 È stato scoperto che html2xhtml v1.3 contiene una lettura fuori dai limiti nella funzione static void elmclosetreenodet nodo in procesador.c. Questa vulnerabilità consente agli aggressori di accedere a file sensibili o causare un Denial of Service DoS tramite un fil...

CVE-2026-76198

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

SOC_287

SOC287 - Lettura Arbitraria di File su Checkpoint Security Gateway CVE-2024-24919 Panoramica Questo repository contiene un'analisi dettagliata della vulnerabilità CVE-2024-24919 che colpisce i Check Point Security Gateway. La vulnerabilità consente la lettura arbitraria di file, esponendo...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U era soggetto a una vulnerabilità di directory traversal che consentiva l'accesso in lettura a file sensibili sulla macchina host. INSTALLAZIONE git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt UTILIZZO...

CVE-2023-49981

CVE-2023-49981 Sistema de Gestão de Taxas Escolares v1.0 - Controle de Acesso Incorreto - Listagem de Diretórios Descrição : Uma vulnerabilidade de listagem de diretórios no Sistema de Gestão de Taxas Escolares v1.0 permite que atacantes listem diretórios e arquivos sensíveis dentro da aplicação...

Cisco-ASA-FTD-Web-Services-Traversal

Vulnerabilità di Path Traversal nei servizi Web del software Cisco Adaptive Security Appliance e Firepower Threat Defense CVE-2020-3452 Uso: CVE-2020-3452.py https://target Descrizione della vulnerabilità: Una vulnerabilità nell'interfaccia dei servizi Web del software Cisco Adaptive Security...

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

CVE-2026-11111 – TOCTOU na Verificação de Permissão de Arquivo Antes de Abrir Código do Programa Python root@kitploit: toctouserver.py - File server that checks permission then opens import os, time, tempfile from flask import Flask, request app = Flaskname SAFEDIR = '/tmp/safe' @app.route'/read'...

cve-2021-41773

CVE-2021-41773 – Apache Path Traversal Bericht Zusammenfassung Schwachstelle in Apache HTTP Server 2.4.49, die je nach Webserver-Konfiguration durch einen Path-Traversal-Angriff den Zugriff auf sensible Systemdateien ermöglicht Path Traversal: Ein Angreifer kann Pfade mit ../ verwenden, um auf...

CVE-2025-25163-Nuclei-Template

قالب Nuclei لـ CVE-2025-25163 🚀 نظرة عامة يحتوي هذا المستودع على قالب Nuclei مصمم خصيصًا لاكتشاف ثغرة Path Traversal CVE-2025-25163 في إضافة Plugin A/B Image Optimizer لووردبريس. تشكل هذه الثغرة خطرًا أمنيًا حرجًا، حيث تسمح بالوصول غير المصرح به إلى ملفات الخادم الحساسة. 🔍 وصف الثغرة CVE-2025-251...

CVE-2024-36991

CVE-2024-36991 Vulnerabilità di path traversal in Splunk Enterprise su versioni Windows inferiori a 9.2.2, 9.1.5 e 9.0.10 che consente la lettura di file sensibili...

CVE-2026-60083 SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-14952

Frauscher's FDS102 web server exposes sensitive railway signaling and track layout data — including /FdsBackup.zip and files under /downloads/* — without authentication over HTTP. CVSS 8.7 (HIGH) reflects high confidentiality impact; no integrity or availability effects. No patch or workaround is...

CVE-2026-14978

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

CVE-2026-20320

CVE-2026-20320 is an Out-of-Band Blind XML External Entity (XXE) Injection vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks . The root cause is that external entity resolution is allowed by default, enabling an unauthenticated, remote attacker to send a crafted XML ...

EUVD-2026-62586

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

PT-2026-78521

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

PT-2026-78386

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description The software writes content backup ZIP archives to the web-accessible document root at the endpoint 'content.zip', which exposes sensitive files such as database credentials. Unauthenticated attacke...

CVE-2026-72820

Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...