CVE-2024-6127
BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated at
CVSS
9.8
Crítica
EPSS
10.3%
p96
KEV
—
Exploit Today
29
0-100
Publicado: 27 de jun. de 2024 · Última mod.: 14 de jul. de 2026 · CWE-22 · CWE-434
10.3%EPSS · 30 dias10.3%
2026-10-142026-11-11
BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote, unauthenticated attacker can exploit this vulnerability over HTTP by acting as a normal agent, completing all cryptographic handshakes, and then triggering an upload of payload data containing a malicious path.
- aceresponder.comhttps://aceresponder.com/blog/exploiting-empire-c2-framework
- github.comhttps://github.com/ACE-Responder/Empire-C2-RCE-PoC
- github.comhttps://github.com/BC-SECURITY/Empire/blob/8283bbc77250232eb493bf1f9104fdd0d468962a/CHANGELOG.md?plain=1#L102
- vulncheck.comhttps://vulncheck.com/advisories/empire-unauth-rce
- aceresponder.comhttps://aceresponder.com/blog/exploiting-empire-c2-framework
- github.comhttps://github.com/ACE-Responder/Empire-C2-RCE-PoC
- github.comhttps://github.com/BC-SECURITY/Empire/blob/8283bbc77250232eb493bf1f9104fdd0d468962a/CHANGELOG.md?plain=1#L102
- vulncheck.comhttps://vulncheck.com/advisories/empire-unauth-rce
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-8331——
——0An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.11hCVE-2026-1134083.3 BAI—
——0Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository11hCVE-2026-1248149.8 CRÍ—
——0The Ultimate Addons for Elementor Forms WordPress plugin before 1.0.8 does not properly validate the extension of uploaded files in its bundled file upload field, allowing unauthenticated users to upload arbitrary files such as PHP scripts and achieve remote code execution.6hCVE-2026-748504.3 MÉD—
——0An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files.14hCVE-2026-187928.8 ALT—
——0An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks.14hCVE-2026-1145567.4 ALT—
——0MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of MailEnable. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the Save method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-29161.15h