logrotten

!WARNING This repository has been moved to https://codeberg.org/whotwagner/logrotten. Please visit the new location for the latest updates. Winning a race condition in logrotate to elevate privileges Brief description logrotate is prone to a race condition after renaming the logfile. If logrotate...

CVE-2021-41773

CVE-2021-41773 Apache 2.4.49 Path Traversal Vulnerability Checker Example Platform Linux & Windows...

CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script Description CVE-2024-24919 is a vulnerability in Check Point Security Gateway devices that allows unauthorized access to sensitive files through path traversal exploitation. This vulnerability enables an attacker to read the contents of certain files on the target...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

CVE-2025-25163-Nuclei-Template

Nuclei Template for CVE-2025-25163 🚀 Overview This repository features a Nuclei template specifically designed to detect the Path Traversal vulnerability CVE-2025-25163 in the Plugin A/B Image Optimizer for WordPress. This vulnerability poses a critical security risk, allowing unauthorized access...

spb

spb Shortest Path Bridging vulnerability testing scripts used to find CVE-2016-2783...

CVE-2021-41773_CVE-2021-42013

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE Exploit Author: Lucas Souza https://ls4ss.github.io/ Vendor Homepage: https://apache.org/ Version: 2.4.49, 2.4.50 Tested on: 2.4.49, 2.4.50 CVE : CVE-2021-41773, CVE-2021-42013 Credits: Ash Daulton and the cPanel Security Team Usage...

Apache-HTTP-Server-2.4.49-2.4.50-Path-Traversal-Remote-Code-Execution

Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution Description This is a PoC script for CVE-2021-41773 & CVE-2021-42013 Usage: root@kitploit: python3 exploit.py | Example: Remote Code Execution root@kitploit: python3 exploit.py 127.0.0.1 8080 rce 'id' Path Traversal...

vulnerable-mcp-servers-lab

Vulnerable MCP Servers Lab This repository contains intentionally vulnerable implementations of Model Context Protocol MCP servers both local and remote. Each server lives in its own folder and includes a dedicated README.md with full details on what it does , how to run it , and how to...

mass_cve-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 Screenshot Usage ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Note ! results will be automatically saved in vuln.txt u can add a common dir on...

ZeusCloud

Secure your cloud. ZeusCloud is an open source cloud security platform. Discover, prioritize, and remediate your risks in the cloud. Build an asset inventory of your AWS accounts. Discover attack paths based on public exposure, IAM, vulnerabilities, and more. Prioritize findings with graphical...

CVE-2017-9841

🔍 Features Multi-threaded scanning for efficient testing of multiple targets Intelligent payload generation with unique identifiers for accurate validation Multiple vulnerability path checking across common web application structures Automatic response validation to confirm actual vulnerabilities...

CVE-2024-53677-Docker

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code executio...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

CVE-2026-87743

CVE-2026-87743 is an authorization bypass in Quarkus HTTP security (quarkus-vertx-http). The root cause is a path normalization discrepancy between the security matcher and HTTP request dispatchers: an unauthenticated attacker can craft a URL that the security matcher treats as public, but which ...

EUVD-2026-82862

A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized between the security matcher and HTTP request dispatchers. This allows the attacker to craft a URL that the security matcher considers public, but which is then routed to a...

cloudfox

🦊 CloudFox 🦊 CloudFox helps you gain situational awareness in unfamiliar cloud environments. It’s an open source command line tool created to help penetration testers and other offensive security professionals find exploitable attack paths in cloud infrastructure. CLOUDFOX UPDATE REQUIRED: 12/202...

TProxer

TProxer A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF...

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

CVE-2025-64446 PoC - FortiWeb Path Traversal Description Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb CVE-2025-64446 that allows execution of administrative commands. Technical Details CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

CVE-2024-34470

HSC MailInspector - CVE-2024-34470 A critical vulnerability has been found in HSC Mailinspector up to version 5.2.18. This vulnerability affects an unknown functionality of the file /public/loader.php. Manipulating the 'path' argument with an unknown input leads to a path traversal vulnerability...