12 matches found
Zaver - Local File Inclusion
Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. id: CVE-2022-38794 info: name: Zaver - Local File Inclusion author: pikpikcu severity: high description: | Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. impact: |...
Zaver - Local File Inclusion Detection
Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. !/usr/bin/env python3 -- coding: utf-8 -- """Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.""" import re from kittysploit import from lib.protocols.http.httpclient import...
CVE-2022-38794
Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...
CVE-2022-38794
Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...
CVE-2022-38794
Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...
CVE-2022-38794
Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...
Directory traversal
Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...
CVE-2022-38794
Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...
CVE-2022-38794
Zaver (through 2020-12-15) is vulnerable to Local File Inclusion via the GET /.. substring. The connected Nuclei template confirms the flaw as a local file inclusion issue, enabling potential unauthorized access and data leakage. Impact details in the template mention possible remote code executi...
Zaver path traversal vulnerability
Zaver is a fast and efficient HTTP server for individual developers. A security vulnerability exists in Zaver version 2020-12-15 and earlier that stems from allowing directory traversal via substrings...
PT-2022-24571 · Zaver · Zaver
Name of the Vulnerable Software and Affected Versions: Zaver versions through 2020-12-15 Description: The issue allows directory traversal via the GET /.. substring. This can be exploited through the "GET /.. substring" API endpoint. Recommendations: For versions through 2020-12-15, consider...
