Mastodawn

📢 LFI critique non authentifiée dans Traccar (Windows) via Jetty expose des identifiants
📝 Selon une publication technique de ProjectBlack, des chercheurs ont mis au jour une vulnérabilité critique de type Local File Inclusion (LFI) non authentifiée a...
📖 cyberveille : https://cyberveille.ch/posts/2025-10-02-lfi-critique-non-authentifiee-dans-traccar-windows-via-jetty-expose-des-identifiants/
🌐 source : https://projectblack.io/blog/jetty-addpath-lfi/
#Jetty #LFI #Cyberveille

LFI critique non authentifiée dans Traccar (Windows) via Jetty expose des identifiants

Selon une publication technique de ProjectBlack, des chercheurs ont mis au jour une vulnérabilité critique de type Local File Inclusion (LFI) non authentifiée affectant la plateforme de suivi GPS Traccar sur Windows, permettant la lecture de fichiers arbitraires et l’exposition d’identifiants sensibles. La faille provient du composant DefaultOverrideServlet de Traccar, où la méthode getResource() passe le paramètre contrôlé par l’utilisateur à Jetty Resource.addPath() sans validation suffisante des séquences d’échappement spécifiques à Windows. Bien que Jetty URIUtil.canonicalPath() bloque les traversées de chemin avec des slashs, il ne neutralise pas correctement les backslashes sous Windows, ouvrant la voie à une LFI non authentifiée.

CyberVeille

Denis Olivier | Photography 6d ago

West Jetty, Etude 1, Sant-Nazaire, France. November 2021. Ref-11545
https://www.denisolivier.com/photography/west-jetty-etude-1-sant-nazaire-france/en/11545
#kodakportra #pier #denisolivierphoto #harbour #west #harbor #denisolivierphotography #dark @visitstnazaire @villestnazaire #saintnazaire #ocean #timeless #denisolivier #jetty #portra #atlantic

blueHOMES AG Europa Immobilien Sep 25

Plot of land on the Ebro River 🐟

For sale a plot of land with electricity and water/waste water with access to the #Ebro #River - size 2585sqm - a #jetty is available as well as a toilet house with shower and office container.

The #property contains about 3000 m2 of historical land with over 20 #olive trees 🫒

Plot: 2.585m²
#Huesca #Spain 🇪🇸
110.000 €

https://www.bluehomes.com/PE0891/en/Plot-of-land-on-the-Ebro-River/expose.html

#olives #land #landforsale #realestate #riverproperties

Plot of land on the Ebro River

For sale a plot of land with electricity and water/waste water with access to the Ebro River - size 2585sqm - a jetty is available as well as a toilet house with shower and office container. The ...

Goudomrand Sep 24

Just another autumn morning at the borders of the Western Scheldt

#dailypicture #boats #coast #pier #jetty #nature #vlissingen #sea #river #westerschelde #quietness #relaxing #morning #morningsunlight #windmill #cityphotography

Maikel de Bakker Sep 20

There’s a jetty at Westkapelle, near the KNRM rescue station. At first glance, it looks like many others: a path of wood reaching into the sea. But when you take a closer look, it reveals a story written in salt, waves, and time.

From the start, the jetty looks strong, straight, well-maintained. Walk further and cracks begin to show, scars of endless storms, bolts rusting, wood worn down. At the very end, the jetty seems to surrender — twisted, broken, almost consumed by the sea. Yet, beneath it, you can still see how often it has been repaired. Again and again, people tried to keep it standing.

It struck me how much this resembles life. We all start with strength and promise, but storms leave marks. Salt crystals, like tiny blades, slowly break down the wood’s fibers; waves hammer it endlessly, reshaping it grain by grain. And still, despite everything, it stands.

Each scar tells a story — of survival, of endurance, of humanity. Just like the jetty, we are never untouched, but always carrying traces of time. And maybe that’s where the beauty lies: not in perfection, but in the evidence of having weathered the storm.

Canon 5DsR + Sigma ART 24/70mm

#Westkapelle #Zeeland #Jetty #SeaAndSky #StoryInWood #WeatheredByTime #DutchCoast #KNRM #SeascapePhotography #LandscapePhotography #PhotographyArt #NaturePhotography #DutchLandscape #OceanWaves #CoastalLife #Resilience #ScarsTellStories #Survival #Endurance #HumanSpirit #HiddenStories #WabiSabi #EmbraceTheScars #PhotographyIsLife #maikeldebakker #SeasideMood #OceanPhotography #WoodAndWater #CanonPhotography #SigmaArtLens #Canon5DsR #ThroughMyLens #SeascapeStory #CoastalMood #WavesAndWood #NatureAndTime #DecayAndBeauty #WestkapelleJetty #PhotoStory #WonderInDetails #ByArmand

Cumbria Skyscapes Sep 15

Hi all I am sorry that I have not been on for a week but I have been down with a really bad cold/flu and not felt like being in front of a computer screen.

So here is a new start to a fresh week, a trip out to Workington with our flip. Hope you are all doing well and have a good one! 😊

#aerialphotography #dronephotography #landscapephotography #djiglobal #djiflip #thelakedistrict #landscape #harbour #jetty #clouds #monochrome #blackandwhitephotography #sea #reflections #photographer #coast