Jiangnan Online Judge 0.8.0 - Local File Inclusion

Jiangnan Online Judge aka jnoj 0.8.0 is susceptible to local file inclusion via web/polygon/problem/viewfile?id=1&name=../. id: CVE-2019-17538 info: name: Jiangnan Online Judge 0.8.0 - Local File Inclusion author: pussycat0x severity: high description: | Jiangnan Online Judge aka jnoj 0.8.0 is...

Sonatype Nexus Repository Manager 3 - Local File Inclusion

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. id: CVE-2024-4956 info: name: Sonatype Nexus Repository Manager 3 - Local File Inclusion author: ritikchaddha severity: high description: | Path Traversal in Sonatype...

CVE-2024-23897

CVE-2024-23897 취약점을 악용하기 위한 PoC로, Jenkins 2.441 이하 버전에서 시스템 내부 파일을 읽을 수 있습니다. 먼저, Jenkins 버전을 확인하여 취약한 버전인지 확인합니다: 그런 다음, 익스플로잇을 사용할 수 있습니다: python3 CVE-2024-23897.py 172.17.0.2 8080 /etc/passwd 취약점 악용 연습을 위해 https://dockerlabs.es 플랫폼의 'SecretJenkins' 실습 환경을 사용했습니다:...

CVE-2026-102457

EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrary system files...

CVE-2024-36991

CVE 2024-36991 공격자가 시스템에서 파일을 읽을 수 있게 하는 경로 탐색 취약점입니다. 기술 요약 CVE : 2024-36991 경로 탐색 영향을 받는 시스템 : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 법적 고지 이 도구는 승인된 보안 평가에만 제공됩니다. 무단 사용은 다음을 위반합니다: 컴퓨터 사기 및 남용 방지법 미국 컴퓨터 오용 방지법 영국/EU 사용 시 적절한 승인에 대한 책임을 수락하는 것으로 간주됩니다. 모든 테스트에는 시스템 소유자의 서면 동의가 필요합니다. 사용법:...

Viidure Dashcam Android Application

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to access, modify, or delete sensitive user data and critical system files, potentially compromising the operation of the entire platform. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

DEBIAN-CVE-2026-97024

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files such as passwd, group, machine-id, or resolv.conf to be emptied or replaced with a symlink when the app is installed or upgraded...

CVE-2026-97024

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files such as passwd, group, machine-id, or resolv.conf to be emptied or replaced with a symlink when the app is installed or upgraded...

CVE-2026-97024 Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files such as passwd, group, machine-id, or resolv.conf to be emptied or replaced with a symlink when the app is installed or upgraded...

CVE-2026-97024

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files such as passwd, group, machine-id, or resolv.conf to be emptied or replaced with a symlink when the app is installed or upgraded...

EUVD-2026-88624

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files such as passwd, group, machine-id, or resolv.conf to be emptied or replaced with a symlink when the app is installed or upgraded...

Gladinet CentreStack & TrioFox - Local File Inclusion

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

QNAP Photo Station - Path Traversal

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. id: CVE-2019-7195 info: name: QNAP Photo Station - Path Traversal author: s4e-io severity: critical description: | QNAP devices running Pho...

CVE-2026-93468

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-54337: Improper Neutralization of Argument Delimiters in a Command

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to write/overwrite system files. Version 1.6.14 fixes the issue...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-84609

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

EUVD-2026-78015

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-86886

Apple has addressed a path traversal vulnerability affecting iOS , iPadOS , and watchOS . The root cause was a lack of proper input validation, which could allow an application to modify protected system files . This issue is resolved in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , and watchOS 2...