CVE-2024-27460

CVE-2024-27460 HP Plantronics Hub 3.25.1 Updater Privilege Escalation/Arbitrary File Read Description: HP Plantronics Hub 3.25.1 suffers from a bug that allows low privileged users to perform arbitrary file read as SYSTEM on the machine where the application is installed. Moreover, it is possible...

CVE-2025-13796-PoC

CVE-2025-13796-PoC deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery PoC : curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...

CVE-2020-7699_reproduce

CVE-2020-7699 Reproduction Reproduction for Node.js RCE vulnerabilityCVE-2020-7699, my lab work Setup Node.js edition: v14.16.1, please make sure that the edition of Node.js is 14Other edition will propably work, I didn't test Python edition：3.9.5, Python is only used to send HTTP attack request,...

CVE-2025-34299

CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious SFTP server. How does this detection method work? This...

CVE-2024-4040

CVE-2024-4040 - exploit scanners This repository contains files related to CVE-2024-4040 CrushFTP VFS escape. scanhost.py This script attempts to use the vulnerability to read files outside the sandbox. If it succeeds, the script writes Vulnerable to standard output and returns with exit code 1. ...

Path-Transversal-CVE-2025-31125-

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Harsh Gupta. Usage: python viteexploit.py -u http://target.com python viteexploit.py -f...

CVE-2021-29447

WAV iXML XXE Exploit Generator Generates malicious WAV files that exploit XXE vulnerabilities in WordPress plugins parsing iXML metadata chunks e.g., BookingPress │ Target │ └──────────┘ └──────────┘ ▲ │ │ │ 2. Parse XML │ │ │ 3. GET /xxe.dtd │ │─────────────────────────────┘ │ │ 4. GET...

CVE-2026-111929 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

CVE-2026-111929

Coder versions 2.30.0 before 2.34.8 are vulnerable to a cross-organization file disclosure flaw in the provisioner daemon's DownloadFile gRPC handler . An authorization bypass allows authenticated provisioner daemons to download cached Terraform module archives belonging to other organizations. B...

CVE-2026-111929 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform module archives. Attackers with an org-scoped provisioner key and a...

CVE-2026-111897

The software phpMyFAQ versions 4.2.0-alpha before 4.2.0-beta is vulnerable to an authorization bypass in the attachment administration endpoints. The root cause is a failure to properly restrict actions based on user categories, allowing editors with medium permission mode to manage attachments f...

CVE-2022-45451

Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...

Ashwesker-CVE-2025-52691

🚨 CVE-2025-52691 — Critical SmarterMail Vulnerability Status: 🔥 Critical — Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29–30, 2025 🧩 Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...

CVE-2026-104286-POC

FortiMail CVE-2026-104286 Path Traversal Exploit Overview Advanced unauthenticated remote arbitrary file write exploit for CVE-2026-104286 in FortiMail. Crafted HTTP/HTTPS requests bypass path sanitization in the web client, enabling arbitrary file creation on the underlying OS. Used for red team...

CVE-2026-103978

CVE-2026-103978 - Unauthenticated path traversal in OPNMGR Arbitrary .json file read, no login needed. Found this while reading through the source of agit8or1/OPNMGR, an OPNsense fleet manager written in PHP. | ---|--- CVE| CVE-2026-103978 Advisory| GHSA-8x7v-vwpx-3wr7 Class| CWE-22 Path Traversa...

CVE-2026-103648

CVE-2026-103648 — Path Traversal in image-downloader Discovered by:Amirhossein Roustaei @EterNullSec — Eternull Security 📖 Full technical writeup:eternull.net/posts/cve-2026-103648-image-downloader-path-traversal ⚠️ Educational Purposes Only. This repository documents a responsibly disclosed...

CVE-2024-4956

CVE-2024-4956 Quick and easy exploitation of CVE-2024-4956 for LFI based on original PoC from: VeryLazyTech, https://github.com/verylazytech/CVE-2024-4956. This implementation takes 2 arguments, url and file, and presents the output of the file if it is found...

CVE-2026-100520-laranode-path-traversal

CVE-2026-100520 — Path Traversal → RCE in Laranode File Manager Authorized security research. PoC for defensive and educational use only. Authenticated path traversal in the file-manager upload endpoint of Laranode lets a low-privileged tenant write arbitrary files outside their own home director...

CVE-2025-66838

CVE-2025-66838 Lack of Rate Limiting - File Upload Description An attacker can rapidly upload a large volume of files to cause denial of service CVSS Score: 6.5 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan Abu-Nadi...

GhostCat-LFI-exp

GhostCat-LFI-exp CVE-2020-1938 Original EXP: https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi Only modified one place, can include execute arbitrary files under any project...