2246 matches found
Jiangnan Online Judge 0.8.0 - Local File Inclusion
Jiangnan Online Judge aka jnoj 0.8.0 is susceptible to local file inclusion via web/polygon/problem/viewfile?id=1&name=../. id: CVE-2019-17538 info: name: Jiangnan Online Judge 0.8.0 - Local File Inclusion author: pussycat0x severity: high description: | Jiangnan Online Judge aka jnoj 0.8.0 is...
Sonatype Nexus Repository Manager 3 - Local File Inclusion
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. id: CVE-2024-4956 info: name: Sonatype Nexus Repository Manager 3 - Local File Inclusion author: ritikchaddha severity: high description: | Path Traversal in Sonatype...
CVE-2024-23897
PoC で脆弱性 CVE-2024-23897 を Jenkins バージョン 2.441 以前に対して悪用し、システム内部のファイルを読み取ることができます。 まず、Jenkins のバージョンを確認して、脆弱性があることを確認します。 次に、エクスプロイトを使用します。 root@kitploit: python3 CVE-2024-23897.py 172.17.0.2 8080 /etc/passwd 脆弱性の悪用を練習するために、プラットフォーム https://dockerlabs.es のラボ 'SecretJenkins' を使用しました。...
Gladinet CentreStack & TrioFox - Local File Inclusion
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...
CVE-2026-87747
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-87747
Ragic Enterprise Cloud Database is affected by an Arbitrary File Read vulnerability caused by Relative Path Traversal . Privileged remote attackers can exploit this flaw to download arbitrary system files, resulting in high confidentiality impact with no integrity or availability impact. The CVSS...
CVE-2024-36991
CVE 2024-36991 攻撃者がシステムからファイルを読み取ることを可能にするパストラバーサルの脆弱性。 技術概要 CVE : 2024-36991 パストラバーサル 影響を受けるシステム : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 法的免責事項 このツールは許可されたセキュリティ評価専用に提供されています。無断使用は以下の法律に違反します： コンピュータ詐欺および濫用取締法（米国） コンピュータ不正使用法（英国/EU）...
QNAP Photo Station - Path Traversal
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. id: CVE-2019-7195 info: name: QNAP Photo Station - Path Traversal author: s4e-io severity: critical description: | QNAP devices running Pho...
CVE-2026-78212
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...
CVE-2026-78212
4MOSAn (4MOSAn Management Center) by 4MOSAn Security Technology Co., Ltd. is affected by an Arbitrary File Read vulnerability caused by a Relative Path Traversal flaw. An unauthenticated remote attacker can exploit this to download arbitrary system files from the affected instance, resulting in a...
EUVD-2026-64708
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...
PT-2026-80755
Name of the Vulnerable Software and Affected Versions Winter CMS versions prior to 1.2.13 Description The backend FileUpload form widget improperly trusts the file id POST parameter when resolving attachments. The getFileRecord function resolves the provided ID against the global system files tab...
CVE-2026-72186
In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via showsysfiles and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through t...
CVE-2026-72186
CVE-2026-72186 affects the Linux kernel NTFS handling: system files such as $Bitmap exposed via show_sys_files can be written from userspace, causing volume corruption and a deadlock between writeback and the folio due to the cluster allocator scanning the inode’s page cache. The fixed approach m...
CVE-2026-71964
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system files by uploading a crafted ZIP archive containing symbolic links. Attackers can exploit the application's failure t...
Malicious code in karapace-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d1e2b10c31f45e3c73ad895a1ccd4188cdedf5ab1a795b420f5aa2693d7686 The npm package's preinstall hook runs index.js at install time, which collects the installer's hostname, username, home directory, DNS server list,...
MAL-2026-12392 Malicious code in hyper-kube-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6e8d8500ee41d92250882b57d98d805b381d2d08eeeac7bae55c3f5e417dff package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's hostname, username, home directory, DNS...
MAL-2026-12389 Malicious code in github-app-sts-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9434f2e4ac17da4d2b9dff0c36ed8b3c5cc3f76882b9898b768e78ba982bbac2 The package declares a preinstall lifecycle hook that runs index.js on npm install. index.js collects host identifiers and system files os.hostname,...
Malicious code in github-app-sts-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9434f2e4ac17da4d2b9dff0c36ed8b3c5cc3f76882b9898b768e78ba982bbac2 The package declares a preinstall lifecycle hook that runs index.js on npm install. index.js collects host identifiers and system files os.hostname,...