cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Windows NTLM Hash Disclosure Spoofing Vulnerability Overview CVE-2024-43451 is an NTLMv2 hash disclosure spoofing vulnerability in Windows. It allows an unauthenticated remote attacker to leak a victim's NTLM hash by convincing them to interact with a malicious .url shortcut file...

CVE-2020-15778

CVE-2020-15778 Introduction This repo reproduces CVE-2020-15778. Steps 1. Build the docker images for scp server and client cd client docker build -t client-cve . cd server docker build -t server-cve . 2. Spin up the scp server in container. docker run -d -P --name scp-server server-cve Retrieve...

CVE-2024-45440

Enumeration tool for CVE-2024-45440 by DividesByZer0 & c0d3Ninja CVE-2024-45440 - Drupal 11.x-dev Full Path Disclosure PoC options: -h, --help show this help message and exit -u URL, --url URL Single URL to scan. -f FILE, --file FILE File containing URLs to scan one per line. -t THREADS, --thread...

CVE-2026-108567

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2025-0108

CVE-2025-0108 — WebSecurity PoC & Fix This repository contains a small lab environment for reproducing and mitigating the CVE-2025-0108 issue path confusion / header smuggling between Nginx and Apache. The goal of the assignment is to demonstrate how double-encoded requests can bypass...

CVE-2025-49132-PoC

Guide to use script that exploit the Pterodactyl Path Traversal at locale.json Requirements Exposed Redis Server Panel URL Guide 1. Get access to the server configuration file, which has APPKEY and Redis Database Password + IP 2. Use forgecookie to generate a pterodactylsession cookie 3. Use that...

CVE-2026-59310-POC

CVE-2026-59310 — VMware vCenter Syslog Directory Traversal Leading to Unauthenticated RCE Disclaimer : This project is intended solely for authorized security testing, vulnerability verification, and defensive research. Please use it only in environments where you have obtained explicit written...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

EUVD-2026-96870

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567 InstantSoft icms2 Image image.php files_delete_file path traversal

A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function filesdeletefile of the file system/fields/image.php of the component Image Handler. Performing a manipulation of the argument size results in path traversal. The attack may be initiated remotely. The exploit has...

CVE-2026-108567

A path traversal vulnerability exists in InstantSoft icms2 (up to version 2.18.2) within the Image Handler component. Specifically, the files_delete_file function in the file system/fields/image.php file is susceptible to exploitation through manipulation of the argument size. This flaw can be tr...

CVE-2018-13379-FortinetVPN

CVE-2018-13379-FortinetVPN An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource...

prefetch-hash-cracker

Cracker de Hash de Prefetch Motivación Durante el análisis forense de una máquina Windows, es posible que encuentres el nombre de un archivo prefetch eliminado. Aunque su contenido puede no ser recuperable, el nombre del archivo en sí suele ser suficiente para encontrar la ruta completa del...

CVE-2026-108544

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

CVE-2026-108543

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...

CVE-2024-0670

CVE-2024-0670 – Local Privilege Escalation in CheckMK Agent PowerShell PoC Abstract This repository presents an independent PowerShell proof of concept for CVE-2024-0670 , a Windows local privilege escalation vulnerability in the CheckMK Agent. The vulnerability allows a low-privileged local user...

CVE-2026-108544

A path traversal vulnerability exists in the Lippu Docx Reader Office Viewer App on Android , affecting versions up to 1.4.5 . The flaw is located in the word.office.docxviewer.document.docx.reader.ViewTxt function, where improper handling of the _display_name argument allows for directory traver...

EUVD-2026-96865

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

CVE-2026-108544 Lippu Docx Reader Office Viewer App path traversal

A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such manipulation of the argument displayname leads to path traversal. The attack may be performed from remote...

CVE-2026-78851

Grav Authenticated Path Traversal / Arbitrary Directory Disclosure via Twig mediadirectory Reporter Name: CYBER-SEC Contact: [email protected] Summary Grav's Twig function mediadirectory is exposed inside the page-content Twig sandbox allowlist but does not properly enforce path containment...