123096 matches found
Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177
Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...
CVE-2021-40438-Apache-2.4.48-SSRF-exploit
CVE-2021-40438 - Apache = 2.4.48 - Exploit Python SSRF Una ruta de uri-path de solicitud manipulada puede hacer que modproxy reenvíe la solicitud a un servidor de origen elegido por el usuario remoto. Este problema afecta a Apache HTTP Server 2.4.48 y versiones anteriores. CVSS v3.1: Puntuación...
CVE-2024-21626
about Steps to reproduce ensure kernal = 5.4,4.19,.. and there is openat2 in /proc/kallsyms. v1.0.0-rc93= runc =1.1.11 root@kitploit: $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2 ffffffffa666dea0 t...
CVE-2023-1177-PoC-reproduce
MLflow CVE-2023-1177 - PoC & Reproduce This repository contains Proof-of-Concept PoC exploit code and instructions to reproduce the Local File Inclusion LFI vulnerability in MLflow, identified as CVE-2023-1177. Vulnerability Information: CVE ID: CVE-2023-1177 Vulnerability Type: Local File...
aggressor_snippets
aggressorsnippets A collection of random small Aggressor snippets that don't warrant their own repo locate This Aggressor alias will call the underlying Linux OS command 'locate'. The envisioned use for this is when a custom defined alias is being used in CobaltStrike which requires the full path...
CVE-2026-85706-PoC
CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read CVE-2026-85706 is a critical path-traversal / missing-authentication issue in the GitLab CE/EE Repository Commits and Repository Files APIs: an unauthenticated attacker can make the server read arbitrary files and obtain their...
cve-2025-59532-poc
CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...
CVE-2026-57223
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to CreateServiceA. When Surica...
UBUNTU-CVE-2026-57223
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to CreateServiceA. When Surica...
cve-2025-24071
CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...
CVE-2021-41773-POC
CVE-2021-41773 Informe de Reproducción de Vulnerabilidad Resumen de la Vulnerabilidad CVE ID : CVE-2021-41773 Nombre de la Vulnerabilidad : Vulnerabilidad de Path Traversal en Apache HTTP Server Nivel de Riesgo : Alto CVSS 7.5 Versiones Afectadas : Apache HTTP Server 2.4.49 Descripción de la...
struts-uploader-vulnerability
CVE-2024-53677 — Cómo funciona el exploit y cómo ejecutarlo Resumen de la vulnerabilidad El fallo está en cómo FileUploadInterceptor de Struts entrega el nombre del archivo subido a la clase de acción. Normalmente el interceptor sanitiza el nombre del archivo, pero Struts también permite que...
CVE-2026-85272 Open edX Platform: Path traversal via prefix-bypass in safe_extractall Path Validation
Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extractarchive.py uses isbadpath to validate safeextractall targets by comparing resolved path strings with startswith instead of comparing path component...
CVE-2026-85272 Open edX Platform: Path traversal via prefix-bypass in safe_extractall Path Validation
Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extractarchive.py uses isbadpath to validate safeextractall targets by comparing resolved path strings with startswith instead of comparing path component...
CVE-2026-85272
CVE-2026-85272 affects Open edX Platform from Aspen.1 through the Ulmo and Verawood.1 releases. The root cause lies in openedx/core/lib/extract_archive.py, where the _is_bad_path function validates extracted archive targets using a string prefix comparison (startswith) instead of comparing indivi...
EUVD-2026-83399
Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extractarchive.py uses isbadpath to validate safeextractall targets by comparing resolved path strings with startswith instead of comparing path component...
CVE-2026-85272 Open edX Platform: Path traversal via prefix-bypass in safe_extractall Path Validation
Open edX Platform enables the authoring and delivery of online learning at any scale. From Aspen.1 until Ulmo and Verawood.1, openedx/core/lib/extractarchive.py uses isbadpath to validate safeextractall targets by comparing resolved path strings with startswith instead of comparing path component...
CVE-2026-57223 Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to CreateServiceA. When Surica...
CVE-2025-49132_HTB_SEASON10
CVE-2025-49132 - Exploit RCE de Pterodactyl Panel HTB Temporada 10 - Writeup de la Máquina Pterodactyl Resumen Objetivo: Máquina Pterodactyl HTB Dificultad Media CVE: CVE-2025-49132 Severidad: Crítica CVSS 9.8 Tipo de Ataque: Ejecución Remota de Código No Autenticada Afectado: Pterodactyl Panel...
