45 matches found
CVE-2020-1938TomcatAjpScanner
CVE-2020-1938TomcatAjpScanner Массовое сканирование уязвимости Tomcat AJP Подробности уязвимости 6 января 2020 года Национальная платформа обмена информацией об уязвимостях информационной безопасности CNVD включила в свой каталог уязвимость включения файлов Apache Tomcat CNVD-2020-10487,...
CVE-2024-28995
إثبات المفهوم PoC والماسح الجماعي CVE-2024-28995 نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC وماسح جماعي لثغرة اجتياز الدليل CVE-2024-28995 في SolarWinds Serv-U. تسمح هذه الثغرة بالوصول غير المصرح به لقراءة الملفات الحساسة على الجهاز المضيف. تم اكتشاف الثغرة والإبلاغ عنها بواسطة Hussein Dahe...
grafana-unauth-file-read
grafana-unauth-file-read : CVE-2021-43798 قراءة غير مصرح بها للملفات في Grafana 0day يبدو أن ثغرة 0day الجديدة من نوع LFI في Grafana موجودة بفضل إضافة grafana-clock-panel. يكفي إرسال طلب GET بالشكل التالي: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd قائمة الإضافات...
CVE-2021-43798-Grafana-File-Read
Grafana-File-Read Lettura file non autorizzata in Grafana Versioni interessate: 8.0.0-ultima poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd root@kitploit: GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1...
PT-2026-79743
Name of the Vulnerable Software and Affected Versions docker-socket-proxy versions prior to 0.5.1 Description Insufficient access control granularity occurs when the CONTAINERS environment variable is set, failing to properly gate read endpoints within the /containers Docker API namespace. This...
CVE-2026-34184 Missing Authorization inAlanWeb SCADA
AlanWeb SCADA does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database. This issue was fixed in AlanWeb SCADA...
CVE-2026-23483
Blinko CVE-2026-23483 affects the Blinko AI-powered card note-taking project. Versions 1.8.3 and earlier suffer a path traversal in the plugin file server endpoint: it concatenates paths with join() without validating that the final path remains inside the plugins directory. This could allow an a...
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path traversal sequences, allowing unauthorized attackers to read arbitrary files on the server. When scheduled backup tasks...
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path traversal sequences, allowing unauthorized attackers to read arbitrary files on the server. When scheduled backup tasks...
CVE-2026-23482 Blinko: Unauthorized Arbitrary File Read - /api/file/temp
Blinko is an AI-powered card note-taking project. Prior to version 1.8.4, the file server endpoint does not perform permission checks on the temp/ path and does not filter path traversal sequences, allowing unauthorized attackers to read arbitrary files on the server. When scheduled backup tasks...
CVE-2026-23482
Blinko (AI-powered card note-taking project) before version 1.8.4 exposes a file server endpoint that does not enforce permission checks on the temp/ path and does not filter path traversal sequences. This allows unauthenticated attackers to read arbitrary files on the server. When scheduled back...
CVE-2026-2606
IBM webMethods API Gateway on-prem 10.11 through 10.11Fix3210.15 to 10.15Fix2711.1 to 11.1Fix7 IBM webMethods API Management on-prem fails to properly validate user-supplied input passed to the url parameter on the /createapi endpoint. An attacker can modify this parameter to use a file:// URI...
PT-2026-22805
IBM webMethods API Gateway on-prem 10.11 through 10.11 Fix3210.15 to 10.15 Fix2711.1 to 11.1 Fix7 IBM webMethods API Management on-prem fails to properly validate user-supplied input passed to the url parameter on the /createapi endpoint. An attacker can modify this parameter to use a file:// URI...
PT-2026-20602
The WP AUDIO GALLERY plugin for WordPress is vulnerable to Unauthorized Arbitrary File Read in all versions up to, and including, 2.0. This is due to insufficient capability checks and lack of nonce verification on the "wpag htaccess callback" function This makes it possible for authenticated...
CVE-2025-29847 Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass
A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source functionality, if the URL parameter configured on the frontend has undergone multiple rounds of URL encoding, it may bypass the system's checks. This bypass can trigg...
GHSA-X5GV-JW7F-J6XJ Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Due to an overly broad allowlist of safe commands, it was possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation. Reliably exploiting this requires the ability to add untrusted content into a Claude Code contex...
Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Due to an overly broad allowlist of safe commands, it was possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation. Reliably exploiting this requires the ability to add untrusted content into a Claude Code contex...
CVE-2025-55284 Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Claude Code is an agentic coding tool. Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation due to an overly broad allowlist of safe commands. Reliably exploiting this requires th...
CVE-2025-55284 Claude Code's Permissive Default Allowlist Enables Unauthorized File Read and Network Exfiltration in Claude Code
Claude Code is an agentic coding tool. Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation prompts to read a file and then send file contents over the network without user confirmation due to an overly broad allowlist of safe commands. Reliably exploiting this requires th...
