CVE-2024-24919

Exploit para CVE-2024-24919 Descripción Este script de Python es un exploit para CVE-2024-24919, un CVE que afectó a productos Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versiones: R77.20 EOL, R77.30 EOL, R80.10...

CVE-2025-60012-POC

Solo para fines educativos y de investigación en seguridad. No lo utilice contra sistemas que no posea o para los que no tenga permiso explícito por escrito. →Descargo de responsabilidad completo CVE-2025-60012 — Acceso no autorizado a archivos en Apache Livy -yellow Resumen...

CVE-2022-22828

CVE-2022-22828 Synametrics - SynaMan version 4.9 Summary Viden Labs has found an Insecure Direct Object Reference IDOR vulnerability in Synametric's SynaMan. This vulnerability is present in versions 4.9 and earlier. This vulnerability has since been patched in version 5.0. “Insecure direct objec...

CVE-2025-29927-PoC

CVE-2025-29927 Marco de investigación y pruebas seguras Este repositorio contiene investigación y análisis relacionados con CVE-2025-29927. Demuestra enfoques de prueba seguros y controlados para una vulnerabilidad de salto de ruta/configuración incorrecta de middleware en aplicaciones web. ⚠️...

Ghost-Path-Traversal-CVE-2023-32235-

Informe de Bug Bounty - Path Traversal en Ghost CVE-2023-32235 Resumen La aplicación Ghost es vulnerable a una vulnerabilidad de path traversal, identificada como CVE-2023-32235. Esta vulnerabilidad permite a un atacante acceder a archivos sensibles fuera del directorio previsto manipulando la ru...

nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-48099

A flaw was found in WsgiDAV, a WebDAV server. A remote attacker could exploit this vulnerability by sending a specially crafted WebDAV request path containing encoded parent-directory segments. This could allow the attacker to escape the configured filesystem share root, potentially leading to...

CVE-2026-78051 alexta69 MeTube Cookie File cookies.txt file access

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...

CVE-2026-64967

ATutor's error log viewer contains a path traversal flaw allowing an admin to read arbitrary files outside the logs directory. Version 2.2.4 is confirmed vulnerable; the product is no longer supported and no fix exists, so migration to a maintained alternative is the only remediation. Exploitatio...

CVE-2026-64963 Path Traversal in ATutor

A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...

SUSE CVE-2026-53784

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir to the module root at session initialization withou...

SUSE CVE-2026-53793

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

CVE-2026-72835

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...

CVE-2026-72835

CVE-2026-72835 affects filebrowser before v2.63.21. The issue is that the application fails to canonicalize paths before evaluating access rules, allowing an authenticated user to bypass administrator-defined deny rules by using case-variant or backslash-separated paths. Attackers can request fil...

CVE-2026-72835 filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...

CVE-2026-16896

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

CVE-2026-16896

IBM i versions 7.3–7.6 are affected by CVE-2026-16896 (TOCTOU race condition in Network Authentication Service). Local authenticated attackers could obtain unauthorized access to files due to a TOCTOU flaw. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. Remediation: apply the fixed PTFs per version...

AZL-95852 CVE-2026-53784 affecting package rsync for versions less than 3.5.0-1

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir to the module root at session initialization withou...

ALPINE-CVE-2026-53784

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir to the module root at session initialization withou...