a1ohadance/CVE-2026-38360

PoC

Advisory: CVE-2026-38360 path traversal (CWE-22) in dash-uploader (Python/PyPI)

view exploit source poc_in_githubauthor a1ohadancepublished 2026-05-07catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-38360US	—	5.98% (93rd)	Exploit	2026-05-08
Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.