rsync: rsync: Unauthorized File Access via Symlink Module Root

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks...

CVE-2026-81301 Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File.... It then supports query, openFile,...

CVE-2026-81301

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps a caller-controlled URI path directly to a filesystem path via new File(...), supporting query() , openFile() , and delete() ...

Ghost-Path-Traversal-CVE-2023-32235-

Bug Bounty Report - Ghost Path Traversal CVE-2023-32235 概要 Ghostアプリケーションは、CVE-2023-32235として識別されるパストラバーサルの脆弱性の影響を受けます。この脆弱性により、攻撃者は「package.json」ファイルパスを操作することで、意図されたディレクトリ外の機密ファイルにアクセスできます。 脆弱性詳細 CVE ID: CVE-2023-32235 脆弱性タイプ: パストラバーサル 影響を受けるアプリケーション: Ghost 影響を受けるバージョン: 最新バージョンX.X.Xまでの全バージョン 影響:...

CVE-2024-24919

CVE-2024-24919 のエクスプロイト 説明 このPythonスクリプトは、CVE-2024-24919のエクスプロイトです。このCVEは、Check Point製品（CloudGuard Network、Quantum Maestro、Quantum Scalable Chassis、Quantum Security Gateways、Quantum Spark Appliances）およびバージョン（R77.20 EOL、R77.30 EOL、R80.10 EOL、R80.20 EOL、R80.20.x、R80.20SP EOL、R80.30 EOL、R80.30SP...

CVE-2022-22828

CVE-2022-22828 Synametrics - SynaMan バージョン 4.9 概要 Viden Labs は、Synametrics の SynaMan に Insecure Direct Object Reference IDOR の脆弱性を発見しました。この脆弱性は、バージョン 4.9 以前に存在します。 この脆弱性は、その後バージョン 5.0 で修正されました。 Insecure Direct Object References（IDOR）は、アプリケーションがユーザー提供の入力を使用してオブジェクトに直接アクセスする際に発生する、アクセス制御の脆弱性の一種です。 ...

CVE-2026-9225

IBM Langflow OSS 1.0.0 through 1.11.5 is affected by an authorization bypass (CWE-639) in the File/Read File component. When executing flows via the /api/v1/run/advanced/{flow_id} endpoint, component inputs can reference storage paths using arbitrary user or flow identifiers without verifying own...

CVE-2025-60012-POC

教育およびセキュリティ研究目的にのみ使用してください。所有していないシステム、または明示的な書面による許可を得ていないシステムに対しては使用しないでください。 →完全な免責事項 CVE-2025-60012 — Apache Livy の不正なファイルアクセス -yellow 概要...

CVE-2025-29927-PoC

CVE-2025-29927 研究および安全なテストフレームワーク このリポジトリには、CVE-2025-29927 に関する調査と分析 が含まれています。 これは、Web アプリケーションにおけるパストラバーサル/ミドルウェア設定ミスの脆弱性に対する、安全で制御されたテスト手法を示しています。 ⚠️ 重要: このリポジトリは教育目的のみです。明示的な許可なしにシステムを標的にしないでください 。 概要 CVE-2025-29927 は、ミドルウェアの処理における脆弱性に関連し、不適切に設定された場合に不正なファイルアクセスを引き起こす可能性があります。...

CVE-2026-86422

A flaw was found in ImageMagick. This vulnerability, known as a time-of-check-time-of-use TOCTOU flaw, affects path policy enforcement on Windows. A local attacker can exploit this by manipulating symbolic links symlinks during the brief interval between when the system checks a file's permission...

nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw

A flaw in the Node.js Permission Model allows attackers to bypass --permission restrictions, enabling unauthorized read or write access to files and directories...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-48099

A flaw was found in WsgiDAV, a WebDAV server. A remote attacker could exploit this vulnerability by sending a specially crafted WebDAV request path containing encoded parent-directory segments. This could allow the attacker to escape the configured filesystem share root, potentially leading to...

CVE-2026-78051 alexta69 MeTube Cookie File cookies.txt file access

A vulnerability was determined in alexta69 MeTube up to 2026.06.10. The impacted element is an unknown function of the file /download/.metube/cookies.txt of the component Cookie File Handler. This manipulation causes files or directories accessible. The attack can be initiated remotely. The explo...

CVE-2026-64967

ATutor's error log viewer contains a path traversal flaw allowing an admin to read arbitrary files outside the logs directory. Version 2.2.4 is confirmed vulnerable; the product is no longer supported and no fix exists, so migration to a maintained alternative is the only remediation. Exploitatio...

CVE-2026-64963 Path Traversal in ATutor

A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...

SUSE CVE-2026-53784

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir to the module root at session initialization withou...

SUSE CVE-2026-53793

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

CVE-2026-72835

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...

CVE-2026-72835 filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...