Vitejs-exploit

Vite Exploit CVE-2025-31125 Descripción: Explota el path traversal en el endpoint @fs del servidor de desarrollo de Vite CVE-2025-31125 para acceder a archivos sensibles como /etc/passwd y /etc/hosts mediante URLs manipuladas. Creado por Muhammad Waseem. Uso: python viteexploit.py -u...

Vite-CVE-2025-30208-EXP

Herramienta de detección CVE-2025-30208 Análisis de la vulnerabilidad CVE-2025-30208 es una vulnerabilidad de lectura arbitraria de archivos en el servidor de desarrollo de Vite. Un atacante puede leer archivos sensibles del servidor como /etc/passwd o C:\windows\win.ini mediante la construcción ...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner Ey, este es un script de Python multihilo de la hostia por keklick1337 para cazar dominios vulnerables a CVE-2025-30208 en Vite. Básicamente, comprueba si puedes pillar archivos aleatorios a través del endpoint @fs con ?raw?? o ?import&raw?? — piensa en fugas de...

ViteVulScan

ViteVulScan Introducción a las vulnerabilidades Este proyecto cubre 3 vulnerabilidades: CVE-2025-30208 / CVE-2025-31125 / CVE-2025-31486, todas relacionadas con la lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas tres vulnerabilidades tienen una amplia cobertura y son...

ADFSDump

ADFSDump Una herramienta en C para volcar todo tipo de tesoros de AD FS. Creada por Doug Bienstock @doughsec mientras estaba en Mandiant FireEye. Esta herramienta está diseñada para ejecutarse junto con ADFSpoof. ADFSDump generará toda la información necesaria para crear tokens de seguridad usand...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Resumen de vulnerabilidades CVE-2025-30208, CVE-2025-31125 y CVE-2025-31486 son vulnerabilidades de lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas vulnerabilidades permiten a un atacante eludir los controles de acceso...

GHSA-6RH5-QQ4Q-97XH vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

Summary NodeVM's builtin wildcard policy can allow sandboxed code to access fs/promises even when the embedder denies fs. With the following configuration: js require: builtin: '', '-fs', '-childprocess' require'fs' and require'childprocess' are blocked, but require'fs/promises' and...

EUVD-2026-81607

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes...

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

Summary NodeVM's builtin wildcard policy can allow sandboxed code to access fs/promises even when the embedder denies fs. With the following configuration: js require: builtin: '', '-fs', '-childprocess' require'fs' and require'childprocess' are blocked, but require'fs/promises' and...

CVE-2024-42471-PoC

CVE-2024-42471-PoC vulnerabilidad de escritura/sobrescritura de archivos en tar-fs...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787935638)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787935638 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_19105)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202519105 advisory. kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry...

ROS-20260930-73-0121

The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0135

The vulnerability of the cowfilerangeInline function in the fs/btrfs/inode.c module of the Linux kernel is related to the lack of resource release after the expiration of the license period. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

ROS-20260930-73-0128

The vulnerability of the romfsfillsuper function in the fs/romfs/super.c module of the Linux kernel operating system is related to the lack of checking of the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-8023

CVE-2026-8023 — Travesía de ruta en HTTP static-fs de Zephyr PoC Travesía de ruta sin autenticación en el manejador static-fs del servidor HTTP de Zephyr subsys/net/lib/http cuando se usa coincidencia de recursos comodín CONFIGHTTPSERVERRESOURCEWILDCARD=y con HTTPRESOURCETYPESTATICFS. Afecta tant...

ROS-20260929-73-0194

The vulnerability of the parseapplysbmountoptions function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could all...

ROS-20260929-73-0097

The vulnerability of the smb2getksmbdtcon function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

ROS-20260929-73-0040

The vulnerability of the cifsconstructtcon function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

ROS-20260929-73-0114

The vulnerability of the pnfsmarklayoutstateidinvalid function in the fs/nfs/pnfs.c module relates to errors during link counters updates in Linux kernel-based NFS client support. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of...