CVE-2025-47273-PoC

CVE-2025-47273: setuptools バージョン 78.1.0 - setuptools.packageindex におけるパストラバーサル 免責事項 この Proof of Concept PoC は、教育目的および許可されたセキュリティ監査のみを対象としています。著者は、この情報の誤用について一切の責任を負いません。コンピュータシステムへの不正アクセスは違法であり、非倫理的です。 脆弱性の分析 CVE-2025-47273 は、setuptools ライブラリ（v78.1.0 以前）の packageindex...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Rewrite Valve によるディレクトリ保護バイパス → PUT ベースの RCE🚨🚨 概要 CVE-2025-55752 は、Apache Tomcat においてバグ 60013 の修正中に導入されたセキュリティリグレッションです。Rewrite Valve が使用されている場合、Tomcat は URL デコード の前に パス正規化 を適用します。この誤った順序により、StandardContextValve.java で実装されている /WEB-INF/ や /META-INF/...

CVE-2021-41773-POC

CVE-2021-41773-POC CVE-2021-41773 の POC およびラボ構築ドキュメント CVE-2021-41773 とは? CVE-2021-41773 は、Apache HTTP サーバー 2.4.49 および 2.4.50 に存在するパストラバーサル パス横断 の脆弱性です。この脆弱性は、このバージョンで導入されたパス正規化 コードの更新を悪用します。 パス正規化関数: 通常、パス正規化は URL パスを標準形式にフィルタリングし、攻撃者による悪意のある行為を防ぎます。 Apache HTTP Server 2.4.49 では、apnormalizepath...

CVE-2025-55752

CVE-2025-55752：Apache Tomcat パストラバーサル脆弱性 Dockerベースの再現環境で、Apache Tomcat 10.1.44におけるパストラバーサル脆弱性CVE-2025-55752を再現します。 概要 CVE-2025-55752は、Apache TomcatのRewriteValveコンポーネントにおけるパストラバーサル脆弱性です。URLの正規化処理の順序が不適切であることが原因です。つまり、URLの正規化がURLデコードの前に行われるため、攻撃者はURLエンコードされたパストラバーサルシーケンス（例:...

CVE-2026-55846 Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure open uses URI.getPath in Commands.setUpServer in allure-commandline/src/main/java/io/qameta/allure/Commands.java and passes the...

Security update for python313-pip

This update for python313-pip fixes the following issue: CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE CVE-2026-54563

Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, a Cloudreve WebDAV account rooted at a configured folder can send paths such as /dav/%2e%2e/outside.txt because stripPrefix in pkg/webdav/webdav.go joins the decoded request suffix to the account root with...

CVE-2026-76169

Fastify (versions >= 4.0.0 and

PT-2026-85449

Name of the Vulnerable Software and Affected Versions fastify versions 4.0.0 through 5.12.1 Description An unauthenticated attacker can bypass authentication hooks and break prefix encapsulation by sending a malformed URL. The internal not-found router for encapsulated handlers dispatches malform...

github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy

A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...

github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy

A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...

Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software

CVE-2025-20333 - Complete Research & Exploitation Toolkit...

Exploit for CVE-2026-12243

CVE-2026-12243 — NLTK Path Traversal Lab !CVEhttps://img...

SUSE CVE-2026-55677

Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an...

GO-2026-6135 openhole-server vulnerable to path traversal via URL-decoded request path in github.com/bablilayoub/openhole

openhole-server vulnerable to path traversal via URL-decoded request path in github.com/bablilayoub/openhole...

CVE-2026-73628

Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...

EulerOS 2.0 SP13 : mutt (EulerOS-SA-2026-2982)

According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest.CVE-2026-43859 In mutt before 2.3.2, the imapauthgss...

openSUSE 16: tomcat11 / tomcat11-admin-webapps / tomcat11-el-6_0-api / etc (openSUSE-SU-2026:21490-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21490-1 advisory. This update for tomcat11 fixes the following issues - Update to Tomcat 11.0.24 - CVE-2026-59083: Incorrect URL decoding in RewriteValve may allo...

EUVD-2026-51612

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

CVE-2026-59083

A vulnerability in the rewrite valve component of Apache Tomcat allows for a security constraint bypass due to improper handling of URL encoding (Hex Encoding) . This issue affects multiple versions, including 11.0.0-M1 through 11.0.23, 10.1.0-M1 through 10.1.56, 9.0.0.M1 through 9.0.119, and 8.5...