Mastodawn

Trend Micro Discloses Apex One Zero-Day Exploited in Attacks

A critical zero-day vulnerability, CVE-2026-34926, has been discovered in Trend Micro's Apex One on-premises server, allowing pre-authenticated local attackers to inject malicious code - and it's being actively exploited in attacks. Federal agencies have been ordered to patch affected systems ASAP, with a deadline of June 4, 2026.

https://osintsights.com/trend-micro-discloses-apex-one-zero-day-exploited-in-attacks?utm_source=mastodon&utm_medium=social

#ZeroDay #ApexOne #Cve202634926 #TrendMicro #DirectoryTraversal

Trend Micro Discloses Apex One Zero-Day Exploited in Attacks

Learn how to protect against CVE-2026-34926, a Trend Micro Apex One zero-day vulnerability. Patch now and secure your systems today with our expert guidance.

OSINTSights

Bill Oct 16, 2025

Hey #directorytraversal folks. Love the memes. Is dotdotpwn still the zen tool for testing?

Simone:cthulhu:Sep 3, 2025

#meme #directorytraversal

Bill Apr 20, 2025

Easter has been hacked. #directorytraversal

buherator Apr 16, 2025

I've been wondering for a long time if #DirectoryTraversal vulnerabilities could be mitigated by a safe path handling library (similarly to e.g. ORM's). As a side-quest, I stared to implement a prototype for Python, and I'm super interested in your unfiltered opinions:

https://github.com/v-p-b/SafePath/

GitHub - v-p-b/SafePath: Experimental library for safe filesystem path handling

Experimental library for safe filesystem path handling - v-p-b/SafePath

GitHub

0xberserkr Sep 30, 2023

File Inclusion - I have just completed this room! Check it out: https://tryhackme.com/room/fileinc #tryhackme #Vulnerabilities #LFI #RFI #DirectoryTraversal #Fileinclusion #Webapp #fileinc via @RealTryHackMe

#infosec #infosecurity #Hacking

TryHackMe | Cyber Security Training

TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!

TryHackMe

Christopher Bauer

Aug 9, 2023

I was today years old when I first learned that windows hosts accept both ..\ *and* ../ for executing local file inclusion.

Whoa. #directorytraversal #pentesting

Anastasis Vasileiadis Jul 6, 2023

Grafana Attack Surface: How a Visualization and Monitoring Platform Can Expose Your Organization's Data and File System to Attackers

Article: https://hadess.io/grafana-attack-surface/

#grafana #ssrf #directorytraversal #bugbountytips

Grafana Attack Surface

How a Visualization and Monitoring Platform Can Expose Your Organization’s Data and File System to Attackers Directory Traversal in Grafana 7.5.1(CVE-2021-29408)SSRF in Grafana 7.5.1(CVE-2021-29409) Executive Summary Grafana 7.5.1, a popular open-source analytics and monitoring platform, contains two critical vulnerabilities that can be exploited by attackers. The first vulnerability is a server-side request forgery (SSRF) found … Grafana Attack Surface Read More »

HADESS