Microsoft Windows: CVE-2026-85370: WebDAV Elevation of Privilege Vulnerability

Use after free in WebDAV allows an authorized attacker to elevate privileges locally...

PT-2026-111925

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-85827: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85828: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88126: WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88135: WebDAV Elevation of Privilege Vulnerability

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88136: Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88137: WebDAV Information Disclosure Vulnerability

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-87714: WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-96843: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96846: WebDAV Information Disclosure Vulnerability

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96847: WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

IIS_6.0_WebDAV_Ruby

IIS6.0WebDAVRuby Ruby Exploit for IIS 6.0 Buffer Overflow CVE-2017-7269 This exploit takes advantage of the ScStoragePathFromUrl buffer overflow found by Zhiniang Peng and Chen Wu. Usage: ruby exploit.rb Encoding option denotes mandatory options...

CVE-2019-19033

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authentication Bypass I. VULNERABILITY Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. II. CVE REFERENCE...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

pwndrop

pwndrop es un servicio de alojamiento de archivos autodesplegable para enviar cargas útiles de red team o compartir de forma segura tus archivos privados a través de HTTP y WebDAV. Si alguna vez has necesitado configurar rápidamente un servidor web nginx/apache para alojar tus archivos y nunca...

CVE-2025-33053_PoC

CVE-2025-33053 POC Exploit Overview The working directory in a .url file can be set to a foreign WebDAV server. When opened by a Windows client, dependencies for the executable defined in the URL field are searched for in the foreign WebDAV share. If an arbitrary executable or DLL is given the sa...

FreeBSD : py-WsgiDAV -- Multiple vulnerabilities (0f5aaca7-c4d5-11f1-96b4-74563cf85f9d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0f5aaca7-c4d5-11f1-96b4-74563cf85f9d advisory. [email protected] reports: WsgiDAV is a generic and extendable WebDAV server based on WSGI. WsgiDA...

CVE-2026-107857

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...

CVE-2026-107857 Mindwtr: Cloud token and WebDAV password stored in plaintext on mobile

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...