Posts for: #Path-Traversal

HTB Facts — Camaleon CMS Mass Assignment to Root

2026-02-28

#htb #hackthebox #ctf #camaleon-cms #mass-assignment #path-traversal #CVE-2025-2304 #CVE-2024-46987 #facter #privilege-escalation #ruby-on-rails

Walkthrough of HackTheBox Facts machine — from Camaleon CMS mass assignment to root via sudo facter custom facts

[]

2026-02-28

#htb #hackthebox #ctf #wingftp #CVE-2025-47812 #CVE-2025-4517 #tarfile #path-traversal #lua-injection #privilege-escalation #python

Walkthrough of HackTheBox WingData machine — from Wing FTP Server NULL byte Lua injection to root via Python tarfile filter=“data” PATH_MAX bypass

[]