PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-61666] Traccar Unauthenticated LFI v5.8-v6.8.1

projectblack.io | research | CVE-2025-61666 | #lfi | #unauthenticated | #traccar | #cve-2025-61666 | #jetty
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An accidental find: Traccar v5.8-v6.8.1 on Windows has an unauthenticated LFI (CVE-2025-61666) because a servlet bypasses Jetty's path checks. The post reads configs with LDAP passwords.
CVE
CVE-2025-61666
Published
Collected

Related coverage

research · projectblack.io
Local AI for Penetration Testing & Research
The author benchmarks four approaches, including Semgrep and fully agentic GLM 5.1 + Strix, against a known PHPIPAM authenticated LFI (CVE-2026-12194), finding the harness matters more than the model.
research · projectblack.io
Pi.Alert - Unauthenticated SQL Injection
Pi.Alert has an unauthenticated SQL injection (CVE-2026-44886): an unsanitised scansource parameter lets attackers dump the whole database. Covers the code flow and a sqlmap proof of concept.
research · projectblack.io
Gibbon v30.0.00: Authenticated SQL Injection and RCE
Security research on Gibbon, an open-source school management platform: Teacher-level users and above could exploit SQL injection, LFI leading to RCE, and DoS. Fixed in v30.0.01.
research · swarm.ptsecurity.com
Jetty Features for Hacking Web Apps
PT SWARM on attacking Jetty apps: fingerprinting via Server headers and /;' responses, enumerating webapps and contexts, achieving RCE via crafted XML, and bypassing WAFs in assessments.
research · slcyber.io
Advisory: Flarum LFI - CVE-2023-40033
# Advisory: Flarum LFI - CVE-2023-40033 Get research alerts Share on social August 28, 2023 1 min read ### Table of Contents TOC Element Summary Impact Affected Software Product Description...
research · slcyber.io
Leaking File Contents with a Blind File Oracle in Flarum
# Leaking File Contents with a Blind File Oracle in Flarum Get research alerts Share on social August 28, 2023 9 min read ### Table of Contents TOC Element Introduction Understanding the Flarum...
Back