CVE-2020-5902

CVE-2020-5902 Python script to check CVE-2020-5902 F5 BIG-IP devices. Usage python3 CVE-2020-5902.py -i Output - Python script to check CVE-2020-5902 F5 BIG-IP devices. | coded by Abdullah AlZahrani ! Your target: 127.0.0.1 I /etc/passwd readable PoC...

cve-reproduction-lab

CVE Reproduction Lab Overview This project is a cybersecurity research laboratory designed to demonstrate the real-world impact of software vulnerabilities through controlled exploitation and defensive patch simulation. The lab focuses on CVE-2021-41773, a critical path traversal vulnerability in...

CVE-2021-1675

Explanation of the vulnerability The Printer Spooler is a Windows service that manages print queues. It receives jobs submitted by the user, converts them to a format the printer understands, and sends them when the printer is available. It runs as a system service spoolsv.exe with high privilege...

CVE-2020-29254

CVE-2020-29254 TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. ========================== Cross-Side-Request-Forgery CSRF: TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. This could allow an unauthenticated, remote attacker to conduct a...

Nimbus Vestige

Nimbus Vestige NV A forensic reconstruction engine for cloud and identity incident response. Given fragmented cloud, SaaS, and identity telemetry — control-plane logs, sign-in events, token and consent activity — NV reconstructs how an intrusion most likely moved across accounts and services,...

CVE-2024-34102

CVE-2024-34102 Usage python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...

CVE-2025-6218-POC

CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...

CVE-2021-41773

CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49 This issue only affects Apache 2.4.49 and not earlier versions. MORE INFO https://pentesterguruji-notes.notion.site/CVE-2021-41733-f58b52f484b94671b319c107ac2739bf...

CVE-2024-27462

CVE-2024-27462 Wondershare MobileTrans 4.5.6 - Unquoted Service Path Description: Wondershare Filmora versions 4.5.6 and lower contain multiple unquoted service path which allow attackers to escalate privileges to the system level. Impacted services WsAppService3 service binary Path C:\Program...

Offensive

Offensive technologies course This repository contains descriptions of several vulnerabilities and the code that exploits them. Exploitable environments can be found in /dockerfiles/victim folder. Attacker environments can be found in /dockerfiles/attacker folder. Everything comes as Docker image...

CVE-2021-41773

CVE-2021-41773 Path Traversal for Apache 2.4.49 Affected base time: 22:49 06/10/2021 Usage IP python3 CVE-2021-41773.py -i 10.10.10.10 -s List of ips python3 CVE-2021-41773.py -l /home/ac1d/Documents/code/python/CVE-2021-41773/ips.txt -s Screenshot...

PoC-Apache-CVE-2021-41773-Infrastructure-LAB

Apache CVE-2021-41773 — Lab Docker PoC Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...

CVE-2026-108725

Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allows authenticated users to upload HTML files via POST /uploads without type restrictions. Attackers can send the public GET /uploads/path URL to a signed-in victim, executing...

CVE-2026-108716

mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens without enforcing HTTPS endpoints. When discovered device authorization and token endpoints are non-loopback http URLs, on-path network attacker...

CVE-2025-8088

Security Analysis: Path Traversal Exploitation in WinRAR CVE-2025-8088 Note: Repository under development. This project will receive future updates with additional analyses, analysis scripts non-exploit, and presentation material. New versions will be published as soon as they are available. This...

CVE-2021-38819

CVE-2021-38819...

shirocrack

shirocrack Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956. Let's keep this short CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository that allows an unauthenticated attacker with network access to the server to read...

cve-2025-64446-fortiweb-exploit

CVE-2025-64446 Fortinet FortiWeb Path Traversal RCE Exploit A security research tool for detecting and testing the CVE-2025-64446 vulnerability in Fortinet FortiWeb Web Application Firewall WAF. This critical zero-day path traversal vulnerability has been actively exploited in the wild and allows...

CVE-2024-36991

CVE-2024-36991 Path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10 that allows reading sensitive files...

CVE-2024-53677

CVE-2024-53677: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2024-53677 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution...