exploitApache

exploitApache exploit for CVE-2021-41773: Path Traversal cgi-bin...

CVE-2025-64446

🛡️ CVE-2025-64446 - FortiWeb Critical Authentication Bypass & Path Traversal Critical unauthenticated vulnerability allowing remote attackers to create administrator accounts on FortiWeb devices. 📌 Overview CVE-2025-64446 is a severe relative path traversal vulnerability in the FortiWeb Web...

CVE-2025-70342

CVE-2025-70342: Intercepción de Credenciales mediante Named Pipe en erase-install Resumen erase-install anterior a v40.4 commit 2c31239 escribe la salida de credenciales de swiftDialog en una ruta fija /var/tmp/dialog.json. En Macs con Apple Silicon, las credenciales de administrador ingresadas...

CVE-2012-5519

cups-root-file-read.sh ⭐ a bash implementation of the metasploit 'cupsrootfileread.rb' module designed for pentesting and CTFs. mainly a short exercise in bash scripting. intended to be a self-contained program that exploits CVE-2012-5519 on linux systems; it provides the user with an interactive...

CVE-2023-32315

CVE-2023-32315 - Ignite Realtime Openfire Path Traversal Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author phith0n and K3ysTr0K3R Description Openfire is an XMPP server licensed under the Open Source...

CVE-2024-8963

CVE-2024-8963 Ivanti Cloud Services Appliance - Path Traversal Path Traversal en Ivanti CSA anterior a 4.6 Patch 519 permite a un atacante remoto no autenticado acceder a funcionalidad restringida...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read Affected versions: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Default plugins list alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge geomap...

cve-2021-41773

Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...

CVE-2023-2825

CVE-2023-2825 Unauthenticated Directory traversal leads to file read. Summary of the CVE An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment...

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability A Docker-based reproduction environment to reproduce the path traversal vulnerability CVE-2025-55752 in Apache Tomcat 10.1.44. Overview CVE-2025-55752 is a path traversal vulnerability in the RewriteValve component of Apache Tomcat, cause...

CVE-2025-25279-Mattermost-Path-Traversal

🔥 CVE-2025-25279 — Mattermost 10.4.1 📤 Path Traversal in Focalboard allowing file exfiltration 🌟 Presentation This proof of concept demonstrates the exploitation of vulnerability CVE-2025-25279 affecting Mattermost 10.4.1. A flaw in Focalboard the board management module allows arbitrary file...

cve-2021-41773-v-

Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...

CVE-2021-3019

Lanproxy Directory Traversal Vulnerability CVE-2021-3019 Vulnerability Description Lanproxy is an intranet penetration tool that proxies local area network PCs and servers to the public network. It supports TCP traffic forwarding and can support any TCP upper-layer protocol accessing intranet...

CVE-2006-3392

CVE-2021-42913 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from...

CVE-2024-46987

CVE-2024-46987 - Camaleon CMS Local File Inclusion Authenticated Local File Inclusion LFI exploit for Camaleon CMS. Vulnerability Camaleon CMS is vulnerable to an authenticated LFI attack through the /admin/media/downloadprivatefile endpoint. The file parameter is not properly sanitized, allowing...

CVE-2024-34471

CVE-2024-34471 Description: An authenticated user can abuse a Path Traversal vulnerability resulting in file deletion if has write permissions in the mliRealtimeEmails.php file. The filename parameter in the export HTML functionality does not properly validate the file location, allowing an...

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write Vulnerability fontTools is a Python library for manipulating font files. Its varLib module processes .designspace files — an XML format that describes how multiple font masters should be interpolated to produce a variable font. Two weaknesses...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...