CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ SOLO CON FINES EDUCATIVOS Y DE INVESTIGACIÓN ⚠️ 🌐 Idioma / Dil 🇪🇸 Español 🇹🇷 Türkçe Español 📋 Tabla de contenidos Descripción general Características Requisitos Instalación Uso Detalles técnicos Capturas de pantalla Aviso legal Contribuciones 🎯 Descripción...

CVE-2018-11759

CVE-2018-11759 概念验证 描述 Apache Web Server httpd 中用于在将请求路径与 Apache Tomcat JK modjk 连接器（1.2.0 至 1.2.44 版本）中的 URI-worker 映射进行匹配之前对其进行规范化的特定代码，未能正确处理某些边缘情况。如果仅通过 httpd 暴露了 Tomcat 所支持 URL 的一个子集，则精心构造的请求有可能通过反向代理暴露本不应让通过反向代理访问应用的客户端使用的应用功能。在某些配置下，精心构造的请求还可能绕过 httpd 中配置的访问控制。虽然此问题与 CVE-2018-1323...

CVE-2023-36165

CVE-2023-36165 MiniTool Partition Wizard ShadowMaker v.12.7 中存在一个问题，允许攻击者通过 SchedulerService.exe 组件执行任意代码并提升权限。 漏洞利用标题：MiniTool Partition Wizard ShadowMaker v.12.7 - 未引用的服务路径 日期：2023年8月5日 漏洞利用作者：Idan Malihi 厂商主页：https://www.minitool.com/ 软件链接：https://www.minitool.com/download-center/ 版本：12.7...

cve-2023-34035-mitigations

Este repositorio es un conjunto de ejemplos para demostrar las configuraciones en las que las aplicaciones pueden ser vulnerables a https://spring.io/security/cve-2023-34035CVE-2023-34035. Una aplicación es vulnerable cuando se cumplen todas las siguientes condiciones: Spring MVC está en el...

Rails-doubletap-RCE

Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...

CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script Descripción CVE-2024-24919 es una vulnerabilidad en los dispositivos Check Point Security Gateway que permite el acceso no autorizado a archivos sensibles mediante la explotación de path traversal. Esta vulnerabilidad permite a un atacante leer el contenido de...

http-vuln-cve2019-14322.nse

http-vuln-cve2019-14322.nse Nmap NSE 脚本，用于检测 CVE-2019-14322（Pallets Werkzeug 路径遍历漏洞），该漏洞源于 SharedDataMiddleware 在 Windows 路径名中错误处理驱动器名称（如 C:） 描述 CVE-2019-14322 - 发现 Pallets Werkzeug 0.15.4 及之前版本存在一个漏洞。该漏洞被认定为严重。该漏洞影响 Windows 组件的 SharedDataMiddleware 函数。 通过未知输入的操作导致目录遍历漏洞。该漏洞的 CWE 定义为 CWE-22。 此脚本读...

CVE-2021-41773

Exploit de Path Traversal y RCE en Apache CVE-2021-41773 & CVE-2021-42013 Estas son vulnerabilidades críticas de path traversal que afectan a Apache HTTP Server 2.4.49 y 2.4.50. Permiten a los atacantes: Acceder a archivos fuera de la raíz web LFI Lograr ejecución remota de código RCE si CGI está...

CVE-2026-93987 rclone serve docker Path Traversal via Volume Name

rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the rclone serve docker volume plugin. newVolume in cmd/serve/docker/volume.go computes a volume's mountpoint as filepath.Joindrv.root, name from the attacker-supplied name field of a Docker VolumeDriver.Create reques...

CVE-2026-93987

rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the rclone serve docker volume plugin. The newVolume() function in cmd/serve/docker/volume.go constructs a mountpoint via filepath.Join(drv.root, name) using the attacker-controlled name field from a Docker VolumeDriv...

EUVD-2026-83592

rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the rclone serve docker volume plugin. newVolume in cmd/serve/docker/volume.go computes a volume's mountpoint as filepath.Joindrv.root, name from the attacker-supplied name field of a Docker VolumeDriver.Create reques...

EUVD-2026-83591

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the...

CVE-2026-93986

rclone before 1.75.1 contains a path traversal vulnerability in how it handles names from server and third-party listing responses. The tool fails to confine object names to the listed directory, allowing attackers to craft names containing forward slashes and parent directory references (e.g., ....

CVE-2026-93986 rclone before 1.75.1 Path Traversal via Directory Listing Names

rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the...

CVE-2021-41773

CVE-2021-41773 Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49...

s2-067-CVE-2024-53677

s2-067-CVE-2024-53677 s2-067CVE-2024-53677 Summary File upload logic is flawed, and allows an attacker to enable paths with traversals - similar problem as reported in S2-066 Who should read this All Struts 2 developers and users Impact of vulnerability Remote Code Execution Maximum security rati...

Fast-Google-Dorks-Scan

快速谷歌Dorks扫描 这个OSINT项目的主要思想是收集所有可能的Google dorks搜索组合，并查找特定网站的信息：常见的后台管理面板、常见的文件类型和路径遍历。完全自动化。 使用示例： root@kitploit: chmod +x FGDS.sh ./FGDS.sh hydrattack.com 或 root@kitploit: bash ./FGDS.sh hydrattack.com 使用代理 root@kitploit: bash ./FGDS.sh hydrattack.com 192.168.1.1 8080...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Múltiples Vulnerabilidades Este repositorio contiene los exploits de las siguientes vulnerabilidades: CVE-2023-46454: En los routers GL.iNET GL-AR300M con firmware v4.3.7, es posible inyectar comandos arbitrarios de shell a través de un nombre de paquete manipulado en la funcionalidad de...

BurpSuite_403Bypasser

403Bypasser 一个用于绕过 403 受限目录的 BurpSuite 扩展。通过被动扫描（默认启用），每个 403 请求都会被该扩展自动 扫描，只需将其添加到 BurpSuite 中即可享受。 Payloads（测试载荷）： $1：主机名 $2：路径 root@kitploit: $1/$2 $1/%2e/$2 $1/$2/. $1//$2// $1/./$2/./ $1/$2anything -H "X-Original-URL: /$2" $1/$2 -H "X-Custom-IP-Authorization: 127.0.0.1" $1 -H "X-Rewrite-URL:...

CVE-2021-41773

CVE-2021-41773 Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 CVE-2021-41773 Información Se encontró una falla en un cambio realizado en la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal salto de...