Traggo Server - Local File Inclusion

traggo/server version 0.3.0 is vulnerable to directory traversal. id: CVE-2023-34843 info: name: Traggo Server - Local File Inclusion author: DhiyaneshDk severity: high description: | traggo/server version 0.3.0 is vulnerable to directory traversal. impact: | Successful exploitation of this...

CVE-2023-34843

CVE-2023-34843 Disclosure traggo/server version 0.3.0 is vulnerable to directory traversal. Steps to reproduce: 1. Setup traggo/server on your endpoint/server. https://traggo.net/install/ 2. Make a GET request to the following URL. curl -X GET...

CVE-2026-117184

An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...

Exploit for CVE-2026-117184

CVE-2026-117184 — Unauthenticated Denial of Service via GraphQ...

Traggo Server 0.8.3 GraphQL Alias Overloading Denial of Service

Traggo server version 0.8.3 contains an unauthenticated denial of service condition in its GraphQL endpoint due to alias overloading and missing request complexity and body-size limits. A proof of concept is provided. https://packetstorm.news/download/238544...

Traggo Server security vulnerability

Version 0.8.3 of Traggo Server contains a security vulnerability. This vulnerability arises from improper handling of specially crafted POST requests on the GraphQL endpoint, potentially leading to a denial of service...

EUVD-2026-114178

An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...

CVE-2026-117184

Traggo server v0.8.3 is vulnerable to an unauthenticated Denial of Service (DoS) via its GraphQL endpoint. The vulnerability is caused by uncontrolled resource consumption (CWE-400) because the server lacks request body size limits and complexity limits, while the version field lacks an authentic...

CVE-2026-117184: n/a: An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a…

An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...

PT-2026-133626

An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...

CVE-2026-117184

An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...

Traggo Server - Local File Inclusion Detection

traggo/server version 0.3.0 is vulnerable to directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """traggo/server version 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traggo Server - Local...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

Directory traversal

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

Traggo server directory traversal vulnerability

Traggo is a tag-based time tracking tool. A directory traversal vulnerability exists in the Traggo server, which can be exploited by an attacker to read arbitrary files...

CVE-2023-34843: Improper Limitation of a Pathname to a Restricted Directory

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

CVE-2023-34843

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...

Traggo Server path traversal vulnerability

Traggo is a tag-based time tracking tool. A directory traversal vulnerability exists in the Traggo server, which can be exploited by an attacker to read arbitrary files...