CVE-2021-41773

CVE-2021-41773 exploit PoC con configurazione Docker. Portarsi nella directory contenente la configurazione Apache e il Dockerfile condivisi nel repository. Creazione dell'immagine: docker build -t cve-2021-41773:1.0 . Esecuzione dell'immagine Docker: docker run --rm -d -p 4444:80...

CVE-2020-3153

CVE-2020-3153 Codice POC per CVE-2020-3153 - vulnerabilità di path traversal in Cisco anyconnect Leggi di più sulla vulnerabilità qui: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Passaggi per ottenere una shell di Windows sul desktop con...

CVE-2026-54083 Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

CVE-2026-54083

Wazuh is an open-source security platform (XDR/SIEM). The ip-customblock active response script contains a path traversal vulnerability: it concatenates the srcip field from alert JSON directly onto the /ipblock/ base directory without validating that the value is a well-formed IP address. Unlike...

CVE-2026-54083 Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

dotdotpwn

DESCRIZIONE DotDotPwn - Il Fuzzer per Directory Traversal È un fuzzer molto flessibile e intelligente per scoprire vulnerabilità di directory traversal in software come server HTTP/FTP/TFTP, piattaforme web come CMS, ERP, Blog, ecc. Inoltre, dispone di un modulo indipendente dal protocollo per...

CVE-2025-1661

CVE-2025-1661 - Inclusione Locale di File LFI non autenticata in HUSKY – Products Filter Professional per WooCommerce Descrizione Il plugin HUSKY – Products Filter Professional for WooCommerce per WordPress è vulnerabile a Local File Inclusion LFI in tutte le versioni fino alla 1.3.6.5 inclusa...

CVE-2025-8088

CVE-2025-8088 : Vulnerabilità di Path Traversal in WinRAR tramite abuso di NTFS ADS 📌 Riepilogo Esecutivo CVE-2025-8088 è una vulnerabilità critica di path traversal in WinRAR versioni 7.12 e precedenti. Il difetto risiede nel modo in cui l'applicazione elabora i nomi dei file delle voci di...

CVE-2026-81847

MAA-AI MaaMCP versions up to 1.1.1.dev6+g2e4a41287 are affected by a path traversal vulnerability in the save_pipeline/load_pipeline functions of pipeline_tools.py . The flaw allows a remote attacker with low privileges and user interaction to manipulate file paths, potentially reading or writing...

CVE-2026-81847 MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...

CVE-2026-81847 MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...

shiro-cve-2010-3863

Apache Shiro path traversal CVE-2010-3863 Riproduzione della vulnerabilità Setup dell'ambiente locale con docker Apri yakit per catturare i pacchetti payload:/./admin/ Successo...

CVE-2019-14322

CVE-2019-14322 Modificação do exploit de faisalfs10x: PoC do CVE-2019-14322: Limitação inadequada de um caminho para um diretório restrito 'Path Traversal' https://www.acunetix.com/vulnerabilities/web/odoo-lfi-cve-2019-14322/ https://nvd.nist.gov/vuln/detail/CVE-2019-14322 Descrição Uma...

gxdlmsdirector-cve

Molteplici vulnerabilità in Gurux GXDLMS Director – esecuzione di codice remota Gurux GXDLMS Director è un programma Windows open-source per interagire con i contatori di energia tramite l'uso del protocollo DLMS/COSEM. Il software dispone di una funzionalità di aggiornamento remoto per le DLL...

cve-2022-41352

cve-2022-41352 genera poc.tar root@kitploit: $ chmod +x cpiopocgen.py $ ./cpiopocgen.py mostra il dito medio a cpio root@kitploit: $ cd /tmp $ mkdir -p poc/a/b copia poc.tar in /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ totale 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:56...

CVE-2024-32258

Panoramica ID CVE : CVE-2024-32258 Tipo : Attraversamento del percorso Fornitore : FCEUX Prodotti : FCEUXNetPlay Versione : 2.7.0 Correzione : 48b48e7c13be1b949074f42660a33c7ef57135e1 Descrizione FCEUX è un emulatore NES che può riportarci alla nostra infanzia. Offre diverse funzionalità...

POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal-Schwachstelle 📝 Beschreibung Proof of Concept für CVE-2025-69194 , eine kritische Path Traversal-Schwachstelle in GNU Wget2 = 2.2.0 verifiziert auf v1.99.1. Diese Schwachstelle erlaubt es Angreifern, durch die Bereitstellung einer bösartigen Metalink-Datei...

exploit-CVE-2019-14530

OpenEMR CVE-2019-14530 एक्सप्लॉइट OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2026-81845

A path traversal vulnerability in arben-adm mcp-sequential-thinking (up to version 0.5.0) affects the import_session/export_session functions in mcp_sequential_thinking/server.py. Manipulating the file_path argument allows an attacker to access files outside the intended directory. The attack can...

CVE-2026-81845 arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...