Directory Traversal in tiny-http

Affected versions of tiny-http resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

GHSA-CCH6-5X4H-6QC5 Directory Traversal in tiny-http

Affected versions of tiny-http resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

PT-2020-17516

Name of the Vulnerable Software and Affected Versions tiny http crate versions through 2020-06-16 Description An issue in the tiny http crate allows HTTP Request smuggling via a malformed Transfer-Encoding header. This can lead to HTTP pipelining issues and request smuggling attacks due to...

tiny-http directory traversal vulnerability

tiny-http is an http server. A directory traversal vulnerability exists in tiny-http. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Directory Traversal

tiny-http is vulnerable to directory traversal attacks. This is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

CVE-2017-16097

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16097

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16097

CVE-2017-16097 concerns the tiny-http library, a simple HTTP server. The accompanying advisories describe a directory traversal vulnerability where crafted URLs containing relative paths (e.g., ../) allow access to files outside the intended root. Affected versions resolve relative file paths imp...

CVE-2017-16097

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16097: Improper Limitation of a Pathname to a Restricted Directory

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

PT-2018-6126

Name of the Vulnerable Software and Affected Versions: tiny-http versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files...

Directory Traversal

Overview Affected versions of tiny-http resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...

Tiny HTTP Server <= 1.1.9 Path Traversal Vulnerability - Active Check

Tiny HTTP server is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tiny HTTP Server Remote Denial of Service Vulnerability

Tiny HTTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tiny HTTP Server <=v1.1.9 Remote Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python Tiny HTTP Server \n" %sys.argv0 sys.exit payload = "X" 658 try: print "\n! Connecting to %s ..." %sys.argv1 httpServ = httplib.HTTPConnectionsys.argv1 , intsys.argv2 httpServ.connect print "! Sending payload..."...

Tiny HTTP Server 1.1.9 - Remote Crash (PoC)

Tiny HTTP Server 1.1.9 - Remote Crash PoC !/usr/bin/python Tiny HTTP Server \n" %sys.argv0 sys.exit payload = "X" 658 try: print "\n! Connecting to %s ..." %sys.argv1 httpServ = httplib.HTTPConnectionsys.argv1 , intsys.argv2 httpServ.connect print "! Sending payload..." httpServ.request'GET', "/"...