LG LED Assistant - Thumbnail Path Traversal File Upload

A path traversal vulnerability exists in the endpoint handler for /api/thumbnail in Common.js. An unauthenticated remote attacker can exploit this to upload arbitrary files to any location on the disk drive where the product is installed. id: CVE-2024-2863 info: name: LG LED Assistant - Thumbnail...

UniFi OS - Authentication Bypass via Path Traversal (..%2f)

UniFi OS devices contain an improper access control vulnerability caused by insufficient authorization checks, letting network attackers make unauthorized system changes, exploit requires network access. id: CVE-2026-34908 info: name: UniFi OS - Authentication Bypass via Path Traversal ..%2f...

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

Spring Framework Path Traversal in Functional Web Frameworks

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Boss Mini 1.4.0 Build 6221 contains a file inclusion caused by manipulation of the 'path' argument in boss/servlet/document, letting remote attackers include arbitrary files, exploit requires remote access. id: CVE-2023-3643 info: name: CAREL Boss Mini = 1.4.0 - Local File Inclusion author:...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

Jorani 1.0.0 - Remote Code Execution

Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server. id: CVE-2023-26469 info: name: Jorani 1.0.0 - Remote Code Execution author: pussycat0x severity: critical description: | Jorani 1.0.0, an attacker could leverage path traversal to access files...

CVE-2024-25600-mass

subida masiva de shell para cve root@kitploit: python3 exploit.py -l yourlist.txt ruta del shell root@kitploit: https://examplewebsite.com/asd.php...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability POC Vulnerable Endpoints: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

CVE-2026-85706

CVE-2026-85706：GitLab CE/EE 未授权路径遍历 CVE ：CVE-2026-85706，CVSS 3.1 10.0 （AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N） 组件 ：GitLab CE/EE Repository Commits API（Workhorse body-upload 变体） 影响 ：18.7 ≤ version ，经 badrequest! 原样回显进 400 响应。回显先到先得：& / = 是组件边界，解析在第一个非法 % 所在组件处中断并回显该组件，无分隔符时整个文件作为一个组件整体回显（合法的 %xx...

CVE-2023-23397

CVE-2023-23397 Detalles de la Vulnerabilidad 🚨💻 Microsoft ha solucionado recientemente un conjunto de vulnerabilidades de seguridad críticas, incluyendo este exploit de día cero: CVE-2023-23397. El Sistema de Puntuación de Vulnerabilidades Comunes CVSS asignó una puntuación de 9.8 a este exploit...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Exploit de Zip Slip RCE en Xibo CMS CVE-2023-33177 Este exploit demuestra una vulnerabilidad de path traversal en Xibo CMS CVE-2023-33177 que permite la ejecución remota de código mediante importaciones maliciosas de diseños. Detalles de la vulnerabilidad CVE/Aviso: CVE-2023-33177 Versiones...

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 - Apache = 2.4.48 - SSRF Python exploit A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. CVSS v3.1: Base Score: 9.0 Severity: CRITICAL...

CVE-2024-21626

Acerca de Pasos para reproducir asegúrate de que el kernel sea = 5.4,4.19,.. y que haya openat2 en /proc/kallsyms. v1.0.0-rc93= runc =1.1.11 root@kitploit: $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2...

CVE-2023-1177-PoC-reproduce

MLflow CVE-2023-1177 - PoC y Reproducción Este repositorio contiene el código de explotación Proof-of-Concept PoC y la guía para reproducir la vulnerabilidad de Inclusión Local de Archivos LFI en MLflow, identificada como CVE-2023-1177. Información de la vulnerabilidad: ID de CVE: CVE-2023-1177...

aggressor_snippets

aggressorsnippets A collection of random small Aggressor snippets that don't warrant their own repo locate This Aggressor alias will call the underlying Linux OS command 'locate'. The envisioned use for this is when a custom defined alias is being used in CobaltStrike which requires the full path...

CVE-2026-85706-PoC

CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read CVE-2026-85706 is a critical path-traversal / missing-authentication issue in the GitLab CE/EE Repository Commits and Repository Files APIs: an unauthenticated attacker can make the server read arbitrary files and obtain their...

cve-2025-59532-poc

CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...