Back to directory
WRITEUP #1847

Drupal H5P Module <= 2.0.0 (isValidPackage) Zip Slip Vulnerability

RCEZip Slip attackPath traversalSource code disclosure
byEgidio Romano / EgiX
Program
Drupal
Published
Dec 3, 2022
Added to HackDex
Dec 20, 2022
Read Full Writeuphttps://karmainsecurity.com/KIS-2022-06
▸ RELATED WRITEUPS
Shelltorch Explained: Multiple Vulnerabilities in Pytorch Model Server (Torchserve) (CVSS 9.9, CVSS 9.8) Walkthrough
AI / LLMAI
Traccar 5 Remote Code Execution Vulnerabilities
RCEUnrestricted file upload
Path Traversal and Code Execution in CSLA.NET (CVE-2024-28698)
RCEPath traversal
WhatsUp Gold Pre-Auth RCE WriteDataFile Primitive (CVE-2024-4883)
RCEPath traversal
WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive (CVE-2024-4885)
RCEPath traversal

Built with ❤️ by Shubham Rawat