EUVD-2026-101567

Gitingest through 0.3.1 contains a symlink following vulnerability in ingestquery single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and submit its blob URL, causing the serve...

CVE-2026-110767

The Gitingest tool, versions through 0.3.1 , is vulnerable to an arbitrary file read via a symlink following flaw in the ingest_query single-file blob ingestion component. An unauthenticated attacker can exploit this by submitting a blob URL pointing to a symlink committed in a public repository....

CVE-2026-110764 AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download

AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since...

CVE-2026-110764

AstronRPA versions through 1.1.6 are vulnerable to a Cross-Tenant File Disclosure via the resource-service /file/download endpoint. The root cause is an Insecure Direct Object Reference (IDOR) in the FileMapper.getFile function, which fails to perform ownership or tenant checks. This allows authe...

EUVD-2026-101564

AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since...

CVE-2026-110764 AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download

AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other tenants' files by supplying their fileId. Attackers can enumerate predictable time-ordered Snowflake file IDs, since...

Inline-Execute-PE

Inline-Execute-PE DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Design Considerations and Commentary" section! Introducti...

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway, specifically in the Advanced Malware Protection feature. The vulnerability lies in the way the Advanced Malware Protection feature processes email attachments when the file reputation service is enabled. An unauthenticated extern...

CVE-2024-31848-PoC

Exploiting CData within Jetty servers - CVE-2024-31848/49/50/51 - File Path Traversal & File Read What it is A prototype PoC for the automation of vulnerability analysis on targets running CData applications on an embedded Jetty server. Usage Just use -u or --url to specify your target, the scrip...

CVE-2026-110666

The cemtan sar2html software (version 4.0.0 ) contains a path traversal vulnerability within the File Upload component. Specifically, the updateDb function in the sar2html.py file is affected, which could allow for remote exploitation . No information regarding a specific fix or patch is currentl...

EUVD-2026-101559

A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue...

CVE-2026-110666 cemtan sar2html File Upload sar2html.py updateDb path traversal

A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue...

CVE-2021-22204

Vulnerable Version 7.44 12.23 Reproduce $ bash craftadjvuexploit.sh 'cal' $ ./exiftool delicate.jpg Screenshot Reference NVD-CVE-2021-22204...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Introducing Tiny File Manager WH1Z-Edition, the compact and efficient solution for managing your files and folders with enhanced privacy and security features. Gone are the days of relying on external resources – I've stripped down the code to its core, making it...

diskwalker

Diskwalker a simple script to walk your disk and keep track of interesting sets of files After gaining access to a remote machine during penetration testing, you might want to find interesting configuration files or binaries to attempt a privilege escalation. The script is self contained, and wor...

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could the...

CVE-2026-36438

CVE-2026-36438: Sensitive information via password reset The Intelbras VIP 1230 B/D G4 versions prior to 6 allows a remote attacker to obtain sensitive information of administrator account via password reset functionality under OutsideCmd file. Discovered by Henrique Koji, Feb 2026. References:...

CVE-2024-30851-jasmin-ransomware-path-traversal-poc

Jasmin ransomware web panel path traversal PoC EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware I discovered a pre-auth path traversal vulnerability in the Jasmin Ransomware web panel CVE-2024-30851, allowing an attacker to deanonymize panel operators and dump decryption keys...

CVE-2019-9978

CVE-2019-9978 CVE-2019-9978 - PoC RCE in Social WarFare Plugin system'cat /etc/passwd' Save it with filename: payload.txt and upload it on a server. The URI should look like: https://yoursite.com/payload.txt. Finally, supply your --target and --payload-uri options: $ python cve-2019-9978.py...

CVE-2022-21587-POC

CVE-2022-21587-POC- CVE-2022-21587 POC file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit cd slipit python3 setup.py sdist pip3 install --user dis...