Citrix Application Delivery Controller and Citrix Gateway directory traversal remote code execution exploit.

This Metasploit module exploits a directory traversal in Huawei HG255.

This is an nmap nse script to test for the path traversal vulnerability in Citrix Application Delivery Controller (ADC) and Gateway.

Pachev FTP Server version 1.0 suffers from a path traversal vulnerability.

Lotus Core CMS version 1.0.1 suffers from a local file inclusion vulnerability.

SuiteCRM versions 7.11.11 and below suffer from an add_to_prospect_list broken access control that allows for local file inclusion attacks.

DotNetNuke CMS version 9.4.4 suffers from zip split issue where a directory traversal attack can be performed to overwrite files or execute malicious code.

Apache Tomcat AJP Ghostcat file read and inclusion exploit.

PHPKB Multi-Language 9 suffers from an authenticated directory traversal vulnerability.

FIBARO System Home Center version 5.021 suffers from cross site scripting and remote file inclusion vulnerabilities.

Jinfornet Jreport version 15.6 suffers from an unauthenticated directory traversal vulnerability.

Joomla Fabrik component version 3.9.11 suffers from a directory traversal vulnerability.

LimeSurvey version 4.1.11 suffers from a File Manager path traversal vulnerability.

Zen Load Balancer version 3.10.1 suffers from a directory traversal vulnerability. This finding was originally discovered by Cody Sixteen.

TVT NVMS 1000 suffers from a directory traversal vulnerability.

QRadar Community Edition version 7.3.1.6 is vulnerable to instantiation of arbitrary objects based on user-supplied input. An authenticated attacker can abuse this to perform various types of attacks including server-side request forgery and (potentially) arbitrary execution of code.

Booked Scheduler version 2.7.7 suffers from an authenticated directory traversal vulnerability.