TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Exploit-DB

[webapps] Python-Multipart 0.0.22 - Path Traversal

2026-04-30 · Read original ↗

ATT&CK techniques detected

3 predictions
T1059.006Python
95%
"[ webapps ] python - multipart 0. 0. 22 - path traversal # exploit title : python - multipart 0. 0. 22 - path traversal # date : 2026 - 02 - 23 # exploit author : cardosource # vendor homepage : https : / / github. com / kludex / python - multipart # software link : https : / / p…"
T1059.004Unix Shell
55%
"localhost : 8000 / upload " source _ file = " / etc / hosts " # small file to upload ( content written to target ) if not os. path. exists ( source _ file ) : print ( f " [! ] source file not found : { source _ file } " ) sys. exit ( 1 ) # malicious filenames ( payloads ) payload…"
T1059.006Python
38%
": print ( f " error : { e } " ) print ( " - " * 50 ) time. sleep ( 1. 0 ) print ( " \ n [ * ] done. " ) print ( " verify files in container : " ) print ( " docker exec - it vuln - poc find / - name ' * poc * ' - o - name ' * shell * ' 2 > / dev / null " ) print ( " \ nmitigation …"

Summary

Python-Multipart 0.0.22 - Path Traversal