CVE-2023-36169

CVE-2023-36169 An issue in SlySoft Game Jackal Pro v.5.2.0.0 allows an attacker to execute arbitrary code via the server.exe component Exploit Title: Game Jackal Server v5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.allradiosoft.ru Software...

Blackash-CVE-2025-31131

Blackash-CVE-2025-31131 CVE-2025-31131 - YesWiki 4.5.2 Path Traversal Exploit Description YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2. NIST: NV...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability POC Vulnerable Endpoints: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

PT-2026-109675

Name of the Vulnerable Software and Affected Versions argocd-mcp Argo CD MCP Server versions prior to 0.9.1 Description A path traversal issue exists in the delete application tool. This occurs when the applicationName variable is not properly validated, allowing MCP clients or prompt-injected...

Linux Distros Unpatched Vulnerability : CVE-2026-107935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap- vsock package. The unauthenticated...

CVE-2026-85706

CVE-2026-85706: GitLab CE/EE Unauthenticated Path Traversal CVE : CVE-2026-85706, CVSS 3.1 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Component : GitLab CE/EE Repository Commits API Workhorse body-upload variant Affected : 18.7 ≤ version 19.1.8, 19.2.0–19.2.5, 19.3.0–19.3.1 Fixed : 19.1.8 / 19.2.6 ...

CVE-2019-17662

CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...

CVE-2023-23397

CVE-2023-23397 Vulnerability Details 🚨💻 Microsoft has recently addressed a set of critical security vulnerabilities, including this zero-day exploits: CVE-2023-23397. The Common Vulnerability Scoring System CVSS assigned score of 9.8 to this exploit. CVE-2023-23397: Elevation of Privilege in...

CVE-2023-2825-Gitlab

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It wa...

Cve-2022-26809

Cve-2022-26809 CVE-2022-26809 This repo just simply research for the CVE, for more detailed ananlysis,please refer here. UPDATE:05/19 2022 This ananlyze hasn't been finished yet.... UPDATE:05/22 2022 HuanGMz Post and corelight blog show the real vulnerable point:...

zip-shotgun

ZIP Shotgun Script utility per testare la funzionalità di upload di file zip e la possibile estrazione di file zip per vulnerabilità alias Zip Slip. L'idea per questo script proviene da questo post su Silent Signal Techblog - Compressed File Upload And Command Execution e da OWASP - Test Upload o...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 - Apache = 2.4.48 - Exploit Python SSRF Una ruta de uri-path de solicitud manipulada puede hacer que modproxy reenvíe la solicitud a un servidor de origen elegido por el usuario remoto. Este problema afecta a Apache HTTP Server 2.4.48 y versiones anteriores. CVSS v3.1: Puntuación...

CVE-2024-21626

about Steps to reproduce ensure kernal = 5.4,4.19,.. and there is openat2 in /proc/kallsyms. v1.0.0-rc93= runc =1.1.11 $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2 ffffffffa666dea0 t dosysopenat2...

CVE-2023-1177-PoC-reproduce

MLflow CVE-2023-1177 - PoC e Riproduzione Questo repository contiene il codice Proof-of-Concept PoC e le istruzioni per riprodurre la vulnerabilità Local File Inclusion LFI in MLflow, identificata come CVE-2023-1177. Informazioni sulla vulnerabilità: CVE ID: CVE-2023-1177 Tipo di vulnerabilità:...

aggressor_snippets

aggressorsnippets A collection of random small Aggressor snippets that don't warrant their own repo locate This Aggressor alias will call the underlying Linux OS command 'locate'. The envisioned use for this is when a custom defined alias is being used in CobaltStrike which requires the full path...

cve-2025-59532-poc

CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...

CVE-2007-4559

demonstration of CVE-2007-4559 what is this? This is a demonstration of how python's default handling of tar file extraction prior to python v3.11.4 is vulnerable to a simple symlink attack. The instructions below describe how to craft a malicious payload. The script untar.py demonstrates how and...

Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed

Summary A collaborator removed from a project keeps a live, automatic feed of that project's contents, because nothing on any revocation path deletes the webhook they created while they had access. Vikunja already has a revocation-cleanup routine that deletes other derived rows for exactly this...