SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...

CVE-2021-43798-poc

CVE-2021-43798-poc Grafana8.x Arbitrary File Read python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...

CVE-2021-43798-mass_scanner

Grafana CVE 2021-43798 Grafana Unauthorized arbitrary file reading vulnerability CVE-2021-43798 deps python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Dorks Dorks Shodan | Google Google Dorks Shodan Dorks Usage Targets without / at the end. And without http:// or...

CVE-2026-35492

CVE-2026-35492 CVE-2026-35492Path traversal vulnerability in PartitionedDataset allows arbitrary file write Impact PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or maliciou...

CVE-2026-29780

Path Traversal in Official Example Script Leading to Arbitrary File Write Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted fr...

Ashwesker-CVE-2026-21440

🚨 CVE-2026-21440 — Critical Security Vulnerability 🧩 Summary CVE-2026-21440 is a critical path traversal vulnerability affecting the AdonisJS framework, specifically its multipart file upload handling. ⚠️ If exploited, attackers can write files anywhere on the server , potentially leading to remot...

CVE-2025-54677

Sink: Weak check only checks Content-Type, which leads to RCE system arbitrary file upload vulnerability PoC: Change the Content-Type field to image/png and the file signature to GIF87a...

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - Unauthenticated Directory Enumeration CVE ID CVE-2026-29909 Description MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input...

blankspace

Blank Space Blank Space is a refactoring of James Forshaw's original proof of concept for CVE-2021-43893, EFSRPC arbitrary file upload privilege escalation. Blank Space can create arbitrary files on a remote host that is using unconstrained delegation if it isn't patched for CVE-2021-43893. File...

CVE-2026-31431.c

CVE-2026-31431.c This content is provided for educational purposes only. The author assumes no responsibility or liability for any errors or omissions in the content. All information is provided "as is" with no guarantees of completeness, accuracy, usefulness, or timeliness. Any action you take...

CVE-2026-29597

CVE-2026-29597: Improper access control DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive configuration files by force browsing the “/Admin/filemanager/filedetails.asp” endpoint and manipulating the “fil...

CVE-2026-30480

CVE-2026-30480: LibreNMS Local File Inclusion LFI via Path Traversal Overview A Local File Inclusion LFI vulnerability exists in the NFSen module of LibreNMS. An authenticated attacker can exploit path traversal sequences to include arbitrary PHP files from the server filesystem. Field| Value...

CVE-2026-21436

CVE-2026-21436 eopkg = 4.3.4, the Solus OS package manager, writes files containing absolute paths in package contents directly to the specified directory during the installation of packages with the .eopkg extension. Even if the --destdir parameter, used to install the package to a specific...

CVE-2026-2395

CVE-2026-23950 Proof of concept for CVE-2026-23950 - Race condition vulnerability in tar package. Description This repository demonstrates a race condition vulnerability in the tar npm package version 7.5.3 that allows for file collision during extraction. The vulnerability exploits Unicode...

CVE-2021-22205-gitlab

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Remote Code Execution Authenticated 🚨 About the Exploit This is a Bash-based authenticated Remote Code Execution RCE exploit for Tiny File Manager versions = 2.4.6, vulnerable under CVE-2021-40964. The script leverages: Weak upload validation and webroot disclosure, An...

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

CVE-2026-1306

CVE-2026-1306 — midi-Synth WordPress A Python-based, multi-target executable PoC / list runner for CVE-2026-1306 in the WordPress midi-Synth plugin. What does it do? Collects the midiSynthnonce value via HTTP from pages where the midiSynth shortcode is loaded on target sites. Sends an action=expo...

CVE-2026-0911

CVE-2026-0911 — Hustle Module Import PoC A research / pentest helper tool that tests the upload behavior via the authenticated module import endpoint for the WordPress plugin Hustle wordpress-popup, WPMU DEV under CVE-2026-0911. The CVE-2026-0911.py script in this repository or file set should on...

CVE-2026-0740

ninja.py An experimental/tool script that uses file upload endpoints for the Ninja Forms plugin on WordPress sites. It sends requests sequentially to targets in list.txt and writes successful uploads to the shell.txt file. Requirements Python 3 requests usually installed together with urllib3 pip...