45 matches found
CVE-2020-1938TomcatAjpScanner
CVE-2020-1938TomcatAjpScanner Tomcat AJP脆弱性の一括スキャン 脆弱性の詳細 2020年1月6日、中国の国家情報セキュリティ脆弱性共有プラットフォーム（CNVD）はApache Tomcatのファイルインクルード脆弱性（CNVD-2020-10487、CVE-2020-1938に対応）を収録しました。攻撃者はこの脆弱性を利用して、未承認の状態で特定ディレクトリ内の任意のファイルをリモートから読み取ることができます。現在、脆弱性の詳細は公開されておらず、ベンダーは修正を完了した新バージョンをリリース済みです。 脆弱性の分析...
CVE-2024-28995
CVE-2024-28995 PoC 및 대량 스캐너 개요 이 저장소는 SolarWinds Serv-U CVE-2024-28995 디렉터리 트래버설 취약점에 대한 개념 증명PoC 및 대량 스캐너를 포함합니다. 이 취약점은 호스트 머신에서 민감한 파일을 무단으로 읽을 수 있게 합니다. 이 취약점은 Hussein Daher가 발견하여 보고했습니다. 기능 단일 대상 스캔 : 단일 URL에서 CVE-2024-28995 취약점을 스캔합니다. 대량 스캔 : 파일에서 여러 URL을 읽어 CVE-2024-28995 취약점을 스캔합니다. 멀티스레...
grafana-unauth-file-read
grafana-unauth-file-read : CVE-2021-43798 Grafana에서 파일 무단 읽기 0day Grafana의 새로운 0day LFI는 grafana-clock-panel 플러그인 덕분에 존재하는 것으로 보입니다. 다음 형식의 GET 요청을 보내는 것만으로 충분합니다: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd 플러그인 목록 root@kitploit:...
CVE-2021-43798-Grafana-File-Read
Grafana-File-Read Grafana 인증 없이 파일 읽기 영향 버전: 8.0.0-lastest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd root@kitploit: GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host: 127.0.0.1:3000 User-Agent:...
PT-2026-79743
Name of the Vulnerable Software and Affected Versions docker-socket-proxy versions prior to 0.5.1 Description Insufficient access control granularity occurs when the CONTAINERS environment variable is set, failing to properly gate read endpoints within the /containers Docker API namespace. This...
CVE-2026-34184 Missing Authorization inAlanWeb SCADA
AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database. This issue was fixed in AlanWeb SCADA...
CVE-2026-23483
Blinko CVE-2026-23483 affects the Blinko AI-powered card note-taking project. Versions 1.8.3 and earlier suffer a path traversal in the plugin file server endpoint: it concatenates paths with join() without validating that the final path remains inside the plugins directory. This could allow an a...
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path traversal sequences, allowing unauthorized attackers to read arbitrary files on the server. When scheduled backup tasks...
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path traversal sequences, allowing unauthorized attackers to read arbitrary files on the server. When scheduled backup tasks...
CVE-2026-23482
Blinko (AI-powered card note-taking project) before version 1.8.4 exposes a file server endpoint that does not enforce permission checks on the temp/ path and does not filter path traversal sequences. This allows unauthenticated attackers to read arbitrary files on the server. When scheduled back...
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path traversal sequences, allowing unauthorized attackers to read arbitrary files on the server. When scheduled backup tasks...
CVE-2026-2606
IBM webMethods API Gateway on-prem 10.11 through 10.11Fix3210.15 to 10.15Fix2711.1 to 11.1Fix7 IBM webMethods API Management on-prem fails to properly validate user-supplied input passed to the url parameter on the /createapi endpoint. An attacker can modify this parameter to use a file:// URI...
PT-2026-22805
IBM webMethods API Gateway on-prem 10.11 through 10.11 Fix3210.15 to 10.15 Fix2711.1 to 11.1 Fix7 IBM webMethods API Management on-prem fails to properly validate user-supplied input passed to the url parameter on the /createapi endpoint. An attacker can modify this parameter to use a file:// URI...
PT-2026-20602
The WP AUDIO GALLERY plugin for WordPress is vulnerable to Unauthorized Arbitrary File Read in all versions up to, and including, 2.0. This is due to insufficient capability checks and lack of nonce verification on the "wpag htaccess callback" function This makes it possible for authenticated...
CVE-2025-29847 Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass
A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source functionality, if the URL parameter configured on the frontend has undergone multiple rounds of URL encoding, it may bypass the system's checks. This bypass can trigg...
GHSA-X5GV-JW7F-J6XJ Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Due to an overly broad allowlist of safe commands, it was possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation. Reliably exploiting this requires the ability to add untrusted content into a Claude Code contex...
Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Due to an overly broad allowlist of safe commands, it was possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation. Reliably exploiting this requires the ability to add untrusted content into a Claude Code contex...
CVE-2025-55284 Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Claude Code is an agentic coding tool. Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation due to an overly broad allowlist of safe commands. Reliably exploiting this requires th...
CVE-2025-55284 Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Claude Code is an agentic coding tool. Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation due to an overly broad allowlist of safe commands. Reliably exploiting this requires th...
