HexBrain
Sign in

Browse / Path Traversal

Path Traversal

296disclosed reports
10weaknesses
$144,499paid in bounties

See it on the mapBypass libraryPayloads

Weaknesses in this class

Often found together with

Most upvoted Path Traversal reports

AllValidInformativeN/ADuplicate

  1. Arbitrary file read via the UploadsRewriter when moving and issuePath Traversal · critical · GitLab
    $20,0001,503 votes
  2. HTML-injection in PDF-export leads to LFIPath Traversal · Visma Public
    $500330 votes
  3. Arbitrary file read via the bulk imports UploadsPipelinePath Traversal · critical · GitLab
    $29,000329 votes
  4. Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted dataPath Traversal · critical · Starbucks
    239 votes
  5. Arbitrary file read during project importPath Traversal · critical · GitLab
    $16,000194 votes
  6. Burp Suite Professional: browser-powered crawl can write attacker-controlled files through file input handlingPath Traversal · high · PortSwigger Web Security
    $5,000176 votes
  7. Path traversal in filename in LINE Mac clientPath Traversal · high · LY Corporation
    175 votes
  8. Mozilla VPN Clients: RCE via file write and path traversalPath Traversal · high · Mozilla
    $6,000173 votes
  9. RCE as Admin defeats WordPress hardening and file permissionsPath Traversal · critical · WordPress
    164 votes
  10. [portswigger.net] Path Traversal al /cms/audioitemsPath Traversal · high · PortSwigger Web Security
    146 votes
  11. Directory Traversal in uftpd 2.6-2.10Path Traversal · ██████
    136 votes
  12. Subdomain takeover of mydailydev.starbucks.comExternally Controlled Reference to a Resource in Another Sphere · high · Starbucks
    122 votes
  13. Path Traversal Vulnerability in Lila ProjectPath Traversal: '.../...//' · high · Lichess
    117 votes
  14. Linkedin Broken Link Hijacking on https://hemi.xyz/aboutExternally Controlled Reference to a Resource in Another Sphere · low · Hemi VDP
    110 votes
  15. DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Uncontrolled Search Path Element · high · Sony
    109 votes
  16. Zero day path traversal vulnerability in Grafana 8.x allows unauthenticated arbitrary local file readPath Traversal · high · Aiven Ltd
    $1,000105 votes
  17. Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49Path Traversal · critical · Internet Bug Bounty
    $4,00096 votes
  18. Path traversal in Nuget Package RegistryPath Traversal · high · GitLab
    $12,00088 votes
  19. Avatar upload allows arbitrary file overwritingPath Traversal · Mail.ru
    $75088 votes
  20. Subdomain takeover of v.zego.comExternally Controlled Reference to a Resource in Another Sphere · high · Zego
    84 votes
  21. Vanilla Forums AddonManager getSingleIndex Directory Traversal File Inclusion Remote Code Execution VulnerabilityPath Traversal · Vanilla
    $90084 votes
  22. Korea - LFI via path traversal at https://msr.istarbucks.co.kr:6443/appif/Path Traversal · critical · Starbucks
    81 votes
  23. File writing by Directory traversal at actionpack-page_caching and RCE by itPath Traversal · high · Ruby on Rails
    $1,00080 votes
  24. PUT Based CSRF via Client Side Path Traversal + Cookie Bomb on Acronis CloudPath Traversal · Acronis
    $60076 votes
  25. Path traversal lead to LFR via [CVE-2019-3394]Path Traversal · Mail.ru
    74 votes
  26. Local files reading from the web using `brave://`Path Traversal · critical · Brave Software
    74 votes
  27. CVE-█████-35813 in █████Relative Path Traversal · critical · Mars
    71 votes
  28. CVE-2020-3187 - Unauthenticated Arbitrary File DeletionPath Traversal · critical · U.S. Dept Of Defense
    70 votes
  29. Unauthenticated LFI (Local File Inclusion) using the symbol `!` At the target `https://████/`Path Traversal · high · U.S. Dept Of Defense
    69 votes
  30. LFI to steal /etc/passwd - Bypass filter in the <meta property="og:image"> tag via redirect and much morePath Traversal · BugPoC
    $10069 votes
  31. jitsi-call-analytics: Unauthenticated arbitrary file write via path traversal in `/api/v1/uploads/analyze`Path Traversal · low · 8x8
    $10068 votes
  32. Deprecated Hacker101 coursework repository mentions Heroku App that is susceptible to takeoverExternally Controlled Reference to a Resource in Another Sphere · HackerOne
    $50068 votes
  33. Path traversal by monkey-patching Buffer internalsPath Traversal · high · Internet Bug Bounty
    $2,43067 votes
  34. Path traversal in deeplink query parameter can expose any user's private info to a public directory (one click)Path Traversal · medium · Basecamp
    65 votes
  35. Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet LibraryPath Traversal · medium · Nextcloud
    63 votes
  36. Path Traversal Vulnerability found on IBM CloudPath Traversal · critical · IBM
    63 votes
  37. CVE-2018-0296 Cisco ASA Denial of Service & Path Traversal vulnerable on [mtn.co.ug]Path Traversal: '.../...//' · critical · MTN Group
    62 votes
  38. MozillaVPN: Elevation of Privilege via a Logic VulnerabilityImproper Link Resolution Before File Access ('Link Following') · medium · Mozilla
    60 votes
  39. Path traversal by drive name in Windows environmentPath Traversal · medium · Node.js
    59 votes
  40. ActiveStorage Disk Service Path Traversal via Custom Blob Key InjectionPath Traversal · medium · Ruby on Rails
    57 votes
  41. Path Traversal in dict-fs and no-check Escape Character in oauth2-jwtPath Traversal · Open-Xchange
    $98257 votes
  42. Arbitrary File WritePath Traversal · high · arkadiyt-projects
    56 votes
  43. Launchpad file read leaks production keysPath Traversal · critical · Basecamp
    $9,33755 votes
  44. Path Traversal в iOS приложенииPath Traversal · high · VK.com
    $70055 votes
  45. [HIGH] CWE-22 — Path Traversal in FTP Wildcard Download via Unencoded `.` in Escaped FilenamesInformativePath Traversal · high · curl
    54 votes
  46. Path traversal in Tempfile on windows OS due to unsanitized backslashesPath Traversal · medium · Ruby
    54 votes
  47. Git flag injection leads to arbitrary file writePath Traversal · high · Phabricator
    54 votes
  48. [Android] Directory traversal leading to disclosure of auth tokensPath Traversal · high · Slack
    $3,50050 votes
  49. Acquisition on broken link listed on the page "https://docs.doppler.com/docs/removal-deprecated-packages-scripts in [scheduling a call]Externally Controlled Reference to a Resource in Another Sphere · low · Doppler
    49 votes
  50. Author → arbitrary file deletion anywhere on disk (site takeover) via `POST /wp/v2/media/<id>/finalize` poisoning `_wp_attachment_metadata`Path Traversal · critical · WordPress
    48 votes
  51. Directory Traversal + HTTP Paramater Pollution leaking SQL/LDAP credentialsPath Traversal · Soleo
    48 votes
  52. molotok.m.mail.ru delegated to external entityExternally Controlled Reference to a Resource in Another Sphere · Mail.ru
    $1,50048 votes
  53. Unauthenticated Path Traversal (LFI) via /custom-sounds/ when CustomSounds uses FileSystem storagePath Traversal · high · Rocket.Chat
    47 votes
  54. Path traversal through path stored in Uint8Array in Node.js 20Path Traversal · high · Internet Bug Bounty
    $3,49544 votes
  55. Path traversal allows tricking the Talk Android app into writing files into it's root directory Path Traversal · medium · Nextcloud
    43 votes
  56. Local files reading using `link[rel="import"]`Path Traversal · high · Brave Software
    43 votes
  57. GitLab CI runner can read and poison cache of all other projectsPath Traversal · critical · GitLab
    $2,00043 votes
  58. Permission model improperly protects against path traversal in Node.js 20Path Traversal · high · Internet Bug Bounty
    $2,33042 votes
  59. Social media account takeover Externally Controlled Reference to a Resource in Another Sphere · low · MTN Group
    41 votes
  60. wavecell.com: Broken Link Hijacking / Instagram Takeover @██Externally Controlled Reference to a Resource in Another Sphere · low · 8x8
    41 votes
  61. Arbitrary file creation with semi-controlled content (leads to DoS, EoP and others) at Steam Windows ClientPath Traversal · medium · Valve
    $1,25041 votes
  62. Arbitrary file read from Cloudflare Pages build environmentPath Traversal · medium · Cloudflare Public Bug Bounty
    40 votes
  63. Path Traversal issue at https://████/blaze/Path Traversal · high · Sony
    40 votes
  64. Remote code execution via path traversal in Zip extraction in the Extract appPath Traversal · high · Nextcloud
    40 votes
  65. [geekbrains.ru] CVE-2019-5418 Ruby on Rails File Content DisclosurePath Traversal · Mail.ru
    $75040 votes
  66. LRF on shared.mail.ru due to "markdown" pluginPath Traversal · Mail.ru
    $6,00040 votes
  67. Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 FixInformativePath Traversal · high · Node.js
    39 votes
  68. CVE-2020-3452 - unauthenticated file read on anyconnect.routematch.comPath Traversal · medium · Uber
    39 votes
  69. Path traversal via archive.extract - CVE 2021-3281 incomplete patchPath Traversal · low · Django
    38 votes
  70. Arbitrary write in the application's data folder and arbitrary read of server's replies from 3rd party apps. Path Traversal · high · Basecamp
    38 votes
  71. Path Traversal on Default Installed Rails Application (Asset Pipeline)Path Traversal · medium · Ruby on Rails
    $1,50038 votes
  72. Path traversal in AcitveStorage, and lead RCEInformativePath Traversal · high · Ruby on Rails
    37 votes
  73. Broken X (Twitter) link on hemi.xyz/aboutExternally Controlled Reference to a Resource in Another Sphere · Hemi VDP
    36 votes
  74. Unathenticated file read (CVE-2020-3452) Path Traversal · high · U.S. Dept Of Defense
    36 votes
  75. Path traversal by monkey-patching Buffer internalsPath Traversal · high · Node.js
    36 votes
  76. Arbitrary read of all SVG files on a Nextcloud serverPath Traversal · high · Nextcloud
    $1,25036 votes
  77. Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()Path Traversal · high · Node.js
    35 votes
  78. Delete directory using symlink when decompressing tarPath Traversal · medium · RubyGems
    $50035 votes
  79. Unpacker improperly validates symlinks, allowing gems writes to arbitrary locationsPath Traversal · medium · RubyGems
    35 votes
  80. Non-authenticated path traversal leading to arbitrary file read Path Traversal · high · ExpressionEngine
    34 votes
  81. Directory traversal at https://msg.algolia.comPath Traversal · medium · Algolia
    34 votes
  82. Internal machine learning API endpoint for CWE classification is vulnerable to path traversalPath Traversal · medium · HackerOne
    33 votes
  83. Path traversal in ZIP extract routine on LINE AndroidPath Traversal · medium · LY Corporation
    $47533 votes
  84. Arbitrary File Read via file:// Protocol in cURLN/APath Traversal · critical · curl
    31 votes
  85. Windows only: arbitrary file read vulnerability in openssl s_serverPath Traversal · medium · Internet Bug Bounty
    31 votes
  86. Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://██████ (███)Path Traversal · high · U.S. Dept Of Defense
    31 votes
  87. [o2.mail.ru] nginx alias traversalPath Traversal · Mail.ru
    $15031 votes
  88. [dev-nightly.ubnt.com] Local File ReadingPath Traversal · high · Ubiquiti Inc.
    31 votes
  89. Active Storage Vips Transformer Missing validate_transformation — CVE-2025-24293 Incomplete FixInformativePath Traversal · high · Ruby on Rails
    30 votes
  90. CVE-2022-21371: Oracle WebLogic Server Local File InclusionPath Traversal · high · Mars
    30 votes
  91. 2 click Remote Code execution in Evernote AndroidPath Traversal: '.../...//' · high · Evernote
    30 votes
  92. Path Traversal in mbstream ExtractPath Traversal · high · MariaDB
    29 votes
  93. Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVE-2021-42013)Path Traversal · critical · Internet Bug Bounty
    $1,00029 votes
  94. Path Traversal in App ProxyPath Traversal · medium · Shopify
    29 votes
  95. LFI in pChart php libraryPath Traversal · high · Valve
    29 votes
  96. LFI in beta.mail.ruPath Traversal · Mail.ru
    $15028 votes
  97. Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.50Path Traversal: '.../...//' · critical · Internet Bug Bounty
    $1,00026 votes
  98. CVE-2020-3187 - unauthenticated arbitrary file deletion in CiscoPath Traversal · QIWI
    26 votes
  99. Subdomain takeover on tilda.geekbrains.ru and fl-change.geekbrains.ruExternally Controlled Reference to a Resource in Another Sphere · Mail.ru
    26 votes
  100. Escaping images directory in S3 bucket when saving new avatar, using Path Traversal in filenamePath Traversal · medium · Unikrn
    26 votes