check_38077

File Name: check38077.exe MD5: 3083C2EA88558D2853FC12214BD3C714 SHA1: 1DF92598CA45B788BA9ED841F5A529AD3F6F85CB SHA256: 7B8AB88220D02A125ACB02E38AF3F4DE71FD6425B2C48D310ABE11603BA633B9 CRC32: F444BBAC...

CVE-2024-53677-POC

CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...

cve-2017-0065

Exploiting Edge's read:// urlhandler Introduction This exploit was reported to Microsoft and I was acknowledged for doing so. The exploit has been patched on March 14th 2017 under names cve-2017-0065 and MS17-007 and will not work if related patches are applied. Sourcecode is provided for...

CVE-2022-44268-fixed-PoC

Fixed version of CVE-2022-44268 Some PoCs don't work for specific file contents. This PoC may work for contents that don't work with other PoCs. Installation Git clone this repo. Then, install the requirements. pip install -r requirements.txt Usage To embed your payload within an image: python3...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC Alert Analysis: Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Introduction CVE-2024-24919 is a critical zero-day vulnerability in Check Point Security Gateways that allows unauthenticated remote attackers to read arbitrary files from affected systems. Discovered in May 202...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule Contains a simple yara rule to hunt for possible compromised KeePass config files How-to Use a yara rule scanner, like yara, loki or thor-lite to scan systems with this rule. The default location for the local KeePass config file is...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI escalation to RCE Testing environment: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 During a security assessment the presence of CVE-2014-2383 was discovered. This document is a proof of concept and does not include the details from the initial discovery in order to protect...

CVE-2020-19360

CVE-2020-19360 Fhem arbitrary file read poc FOFA search title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com single URL test python3 Fhem.py -f url.txt batch detection Tip After the scan is complete, a vulnerable.txt file with vulnerabilities will be...

CVE-2018-14847

CVE-2018-14847 This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and upda...

CVE-2024-21626-POC

CVE-2024-21626-POC Usage Instructions For educational/research purposes only. Any behavior not related to education/research is at your own risk. Usage docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh Start another terminal /bin/bash.copy Note Different docker/runc...

CVE-2020-5902

Readme F5 BIG-IP arbitrary file read + remote command execution RCE +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE + +-------------------------------------------------------------+ ...

CVE-2021-43798

GrafanaArbitraryFileRead Usage 1. show info ❯ go run main.go -s INF VulnInfo: "Name": "Grafana Arbitrary File Read", "VulID": "nil", "Version": "1.0", "Author": "z3", "VulDate": "2021-12-07", "References": "https://nosec.org/home/detail/4914.html" , "AppName": "Grafana", "AppPowerLink":...

CVE-2017-8759

CVE-2017-8759 CVE-2017-8759 use file...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage echo "+-------------------For-The-Help-------------------------------------+"; echo "Example1:...

CVE-2024-46278-teedy_1.11_account-takeover

【CVE-2024-46278】teedy1.11account-takeover 【Teedy 1.11】account takeover via XSS Detail There is a vulnerability that causes XSS when downloading files. XSS vulnerability could allow a Teedy administrator to rob an account with a few clicks. This vulnerability is marked as CVE-2024-46278:...

monstra_cms-3.0.4--getshell

monstracms-3.0.4--getshell monstracms-3.0.4-upload getshell CVE-2018-17418 Code analysis: In line 150 of monstra\plugins\box\filesmanager\filesmanager.admin.php, there is a forbiddentypes variable used as a blacklist restriction. Continue to follow this variable. In the line 150 of...

CVE-2024-0406-POC

CVE-2024-0406 Proof of Concept PoC This repository contains a Proof of Concept PoC exploit for CVE-2024-0406 , a vulnerability involving symlink-based tar archive extraction that allows for path traversal or file overwriting in affected systems. More Details at Path Traversal in mholt/archiver...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Drag and Drop Multiple File Upload for Contact Form 7 Description: Arbitrary file uploads via drag‑and‑drop‑multiple‑file‑upload-contact‑form‑7 ≤1.3.8.9 allow upload of .phar files, leading to remote code execution in Apache+modphp :contentReferenceoaicite:29index=29...

CVE-2019-6447

CVE-2019-6447 This paper is about manual exploitation of android open port vulnerability found in ES file manager. This open TCP port allows the attacker to install a backdoor and gather all the user’s data. Further in this paper there will be a proof of concept presented to consolidate the...

CVE-2024-11635

WordPress File Upload This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: abrahack Status: Public Disclosure Date Reported: 2025-01-07 CVE I...