22 matches found
Traggo Server - Local File Inclusion
traggo/server version 0.3.0 is vulnerable to directory traversal. id: CVE-2023-34843 info: name: Traggo Server - Local File Inclusion author: DhiyaneshDk severity: high description: | traggo/server version 0.3.0 is vulnerable to directory traversal. impact: | Successful exploitation of this...
CVE-2023-34843
CVE-2023-34843 Disclosure traggo/server version 0.3.0 is vulnerable to directory traversal. Steps to reproduce: 1. Setup traggo/server on your endpoint/server. https://traggo.net/install/ 2. Make a GET request to the following URL. curl -X GET...
CVE-2026-117184
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
Exploit for CVE-2026-117184
CVE-2026-117184 — Unauthenticated Denial of Service via GraphQ...
Traggo Server security vulnerability
Version 0.8.3 of Traggo Server contains a security vulnerability. This vulnerability arises from improper handling of specially crafted POST requests on the GraphQL endpoint, potentially leading to a denial of service...
EUVD-2026-114178
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
CVE-2026-117184
Traggo server v0.8.3 is vulnerable to an unauthenticated Denial of Service (DoS) via its GraphQL endpoint. The vulnerability is caused by uncontrolled resource consumption (CWE-400) because the server lacks request body size limits and complexity limits, while the version field lacks an authentic...
Traggo Server 0.8.3 GraphQL Alias Overloading Denial of Service
Traggo server version 0.8.3 contains an unauthenticated denial of service condition in its GraphQL endpoint due to alias overloading and missing request complexity and body-size limits. A proof of concept is provided. https://packetstorm.news/download/238544...
CVE-2026-117184: n/a: An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a…
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
CVE-2026-117184
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
PT-2026-133626
An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...
Traggo Server - Local File Inclusion Detection
traggo/server version 0.3.0 is vulnerable to directory traversal. !/usr/bin/env python3 -- coding: utf-8 -- """traggo/server version 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Traggo Server - Local...
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
Directory traversal
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
Traggo server directory traversal vulnerability
Traggo is a tag-based time tracking tool. A directory traversal vulnerability exists in the Traggo server, which can be exploited by an attacker to read arbitrary files...
CVE-2023-34843: Improper Limitation of a Pathname to a Restricted Directory
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
Traggo Server path traversal vulnerability
Traggo is a tag-based time tracking tool. A directory traversal vulnerability exists in the Traggo server, which can be exploited by an attacker to read arbitrary files...
