Arbitrary-File-Read-CVE-2024-24919

Lettura arbitraria di file CVE-2024-24919 Ecco l'avviso ricevuto sul SIEM Innanzitutto, cos'è CVE-2024-24919? Ecco la descrizione sul sito NIST. Dopo ulteriori ricerche, CVE-2024-24919 è un attacco di path traversal, che spiega la richiesta effettuata alla directory '/etc/passwd'. La directory...

CVE-2020-13886

PoC: https://youtu.be/nNKBRx8IglI root@kitploit: ------------------------------------------------------------------------------------------------------------- ------------- 0day: TELEFONE IP TIP200/200 LITE & TIP 300 | Inclusione Locale di File | ---------------------...

CVE-2020-11651

CVE-2020-11651 Um script que explora as vulnerabilidades CVE-2020-11651 e CVE-2020-11652 do SaltStack para adicionar novos usuários a um Salt master vulnerável, injetando entradas em /etc/passwd e /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 परीक्षण प्रोग्राम webmin का यह रिमोट कमांड निष्पादन रंध्र vulnerability, मोटे तौर पर perl में qx/…/ के कारण कमांड निष्पादन होता है। इसका दोहन करने के लिए कुछ विशेष शर्तों की आवश्यकता होती है। प्रजनन replication के समय मैंने आनन-फानन में एक GUI-आधारित दोहन प्रोग्राम ल...

CVE-2020-25223

CVE-2020-25223 Uno script PoC per testare CVE-2020-25223 contro un Sophos UTM vulnerabile. Dato un indirizzo IP, lo script tenta di scaricare una copia del file /etc/shadow del dispositivo. Ricerca originale: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

CVE-2024-24919

CVE-2024-24919 template nuclei para CVE-2024-24919 Este template ajudará a detectar a vulnerabilidade descrita, verificando se o sistema vaza o conteúdo do arquivo /etc/shadow...

CVE-2024-24919

Check point:CVE-2024-24919 CVE ausführen root@kitploit: nuclei -list chick.txt -t CVE-2024-24919.yaml Ersetzen Sie durch die Ziel-IP-Adresse. Dieser Befehl versucht, auf die Datei /etc/shadow zuzugreifen, die Passwort-Hashes enthält. root@kitploit: curl --path-as-is -i -s -k -X POST \ -H 'Host:...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Überblick über CVE-2019-15107 Webmin ist eine webbasierte Oberfläche zur Systemadministration für Unix. Mit jedem Webbrowser können Benutzerkonten, Apache, DNS, Dateifreigaben und mehr eingerichtet werden. Am 10. August 2019 veröffentlichte der türkische...

MegaHiDocker

MegaHiDocker Questo progetto verrà sfruttato per alcuni container docker con codice di vulnerabilità simile: CVE-2020-35191, ma questa volta su altri container. = Si prega di leggere il file Description.txt Requisiti: 1.È necessario installare docker nel tuo Linux e installare il modulo subproces...

cve-2021-45043

cve-2021-45043 HD-Network Real-time Monitoring System 2.0 consente il directory traversal tramite ../ per leggere /etc/shadow attraverso il parametro sLanguage di /language/lang. post originale https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f sfruttamento tramite Burp G...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploit per scaricare configurazioni Cisco RV320 e ottenere RCE Implementazioni degli exploit CVE-2019-1652 e CVE-2019-1653 divulgati da Red Team Pentesting GmbH. Ho testato questi solo su un RV320, ma secondo l'avviso Cisco, anche l'RV325 è vulnerabile...

EUVD-2026-54398

A TOCTOU Time-of-Check-Time-of-Use race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fixfiles restore, the script used find and chcon commands to locate and relabel unlabeled files under /tmp and other directories. A local attacker...

K000162205: Linux kernel vulnerability CVE-2026-46333

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'getdumpable' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and makes no sens...

CVE-2026-47833 - Symlink vulnerability in setupBpmLogs allows container-to-host privilege escalation via /etc/shadow | Cloud Foundry

Medium CVSS score: 6.8 Medium CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/S:U/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N Vendor Cloud Foundry Foundation Versions Affected Severity is Medium unless otherwise noted. bpm-release – All versions prior to v1.4.30 Description setupBpmLogs follows symlink for bpm.log open and...

kernel: Read root-owned files as an unprivileged user

A vulnerability was found in the Linux kernel that allows an unprivileged local user to read sensitive files normally restricted to the root user. The flaw occurs during process exit, where a brief window allows an attacker to intercept file access from a privileged process before it fully...

CVE-2026-31927

Anviz CX7 Firmware is vulnerable to an authenticated CSV upload which allows path traversal to overwrite arbitrary files e.g., /etc/shadow, enabling unauthorized SSH access when combined with debug‑setting changes...

CVE-2019-25610

NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to...

EUVD-2026-12494

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

CVE-2026-29516 Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

EUVD-2026-9514

International Data Casting IDC SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file...