finereport-directory-traversal: Finereport Directory Traversal

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/chaitin/xray/blob/master/pocs/finereport-directory-traversal.yml
• https://github.com/zhibx/fscan-Intranet
• http://www.x14hack.com/?id=354
• https://cn-sec.com/archives/130545.html
• https://templeorz.github.io/2020/04/28/2020%E6%94%BB%E9%98%B2%E6%BC%94%E7%BB%83%E5%BC%B9%E8%8D%AF%E5%BA%93/
• https://www.ddosi.org/afrog/
• https://buaq.net/go-158839.html
• https://www.yjlink.cc/?id=3426

Related Vulnerabilities

• PoCCVE-2026-26265: Discourse - Private User Field Disclosure via Directory Items IDOR
• PoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal
• PoCCVE-2026-44177: Kirby CMS 5.3.0-5.4.0 - Path Traversal
• WordPress Directory Kit 插件敏感信息泄露漏洞(CVE-2025-13920)
• PoCCVE-2024-1708: ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
• PoCCVE-2026-54917: SeaweedFS <= 4.29 - Path Traversal File Write
• PoCCVE-2026-25895: FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File Write
• PoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE
• PoCnodogsplash-lfi: Nodogsplash - Directory Traversal
• PoCCVE-2025-71324: Flowise - Path Traversal
• PoCCVE-2026-34908: UniFi OS - Authentication Bypass via Path Traversal (..%2f)
• PoCCVE-2026-53519: Nezha Dashboard < 2.0.13 - Path Traversal
• PoCCVE-2024-56511: DataEase < 2.10.4 - Authentication Bypass via Whitelist Path Traversal