By-Poloss..-..CVE-2026-39938

CVE-2026-39938: Cacti = 1.2.30 - Unauthenticated LFI Executive Summary Field| Value ---|--- CVE ID| CVE-2026-39938 CVSS Score| 9.8 Critical Affected Product| Cacti Affected Versions| = 1.2.30 Patched Version| 1.2.31 Fix Commit| 9871f0c Vulnerability Details Root Cause The vulnerability exists in...

cve-2023-34446

CVE-2023-36664: Ghostscript Remote Code Execution Resumen de la vulnerabilidad ID de CVE: CVE-2023-36664 Producto: Ghostscript 10.01.2 Tipo de vulnerabilidad: Remote Code Execution RCE Resumen Esta vulnerabilidad CVE-2023-36664 es una vulnerabilidad de ejecución remota de código RCE que ocurre...

CVE-2026-98379

A flaw was found in the Linux kernel's netfilter subsystem. An unprivileged local user can cause a Denial of Service DoS by triggering a system crash through a null pointer dereference an attempt to access invalid memory. This issue occurs during IPv6 reverse-path filtering when the kernel...

CVE-2023-37800

Unquoted-Service Path in the Fortect - 5.0.0.7 - CVE-2023-37800 Unquoted Service Path in the Fortect - 5.0.0.7 Discoverer: Idan Malihi Description The component MainService.exe is vulnerable to unquoted service path: C:\Program Files\Fortect\MainService.exe Steps to Reproduce To exploit the...

cve-2024-32019-PoC

CVE-2024-32019 — Netdata ndsudo Local Privilege Escalation Summary Netdata’s ndsudo helper installed setuid root restricts which commands it will run, but resolves those commands using the caller’sPATH. In impacted versions, a local user can place a malicious binary earlier in PATH and have ndsud...

CVE-2026-108551

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

exploit-CVE-2023-27564

Exploit for CVE-2023-27564 This vulnerability allows anonymous file read in n8n. import requests url = "https://example.com/rest/data/filesystem:..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd:.svg" response = requests.geturl printresponse.statuscode printresponse.headers...

CVE-2026-53571

CVE-2026-53571 CVE-2026-53571 server.fs.deny bypass on Windows alternate paths PoC. The contents of files that are specified by server.fs.deny can be returned to the browser on Windows. mkdir CVE-2026-53571 cd CVE-2026-53571 npm init -y npm install [email protected] Verification： python3...

CVE-2022-24716

CVE-2022-24716 Exploit for the vulnerability: Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 https://www.sonarsource.com/blog/path-traversal-vulnerabilities-in-icinga-web/ Help: python3 exploit.py -h Usage example: python3 -u http://127.0.0.1:8080 -f /etc/passwd...

gitlab-cve-2026-85706-ioc

CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit GitLab CE/EE Repository Commits API Unauthenticated Path Traversal CVSS 3.1: 10.0, Critical Status: Actively exploited in the wild · Listed in CISA KEV 2026-09-11, due 2026-09-14 · Patched by GitLab 2026-09-10 A free,...

CVE-2023-50164Analysis-

CVE-2023-50164: Apache Struts Vulnerable Application A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution RCE...

CVE-2021-41773

CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

Grafana-8.3-Directory-Traversal

Script en Python para CVE-2021-43798 Descripción: Directory Traversal en Grafana 8.3.0 Prueba esto si EDB-ID 50581 no funciona! Artículo Original: https://ethicalhacking.uk/cve-2021-43798-dissecting-the-grafana-path-traversal-vulnerability/gsc.tab=0 Durante una máquina en OffSec Proving Ground...

CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - Path Traversal in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Path Traversal vulnerability. These vulnerabilities could allows remote authenticated attackers low or high privilege to navigate to locations that should not be accessible to the user.it can be...

CVE-2026-101894

CVE-2026-101894 — @xhmikosr/decompress symlink-chain path traversal Python 3 PoC for CVE-2026-101894 — Node.js archive extraction in @xhmikosr/decompress and unmaintained decompress allows read/write outside the output directory via a chain of symlink entries. Bypass of CVE-2026-53486 hardening...

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: Vulnerabilidad de Lectura Arbitraria de Archivos Este código te ayudará a entender la combinación de solicitud y respuesta del ataque. Usa una herramienta proxy para ver el resultado. python3 CVE-2024-23897.py -u $url -p $filepathtoread...

fortinet-fortiweb-cve-2025-64446-58034

Understanding Fortinet FortiWeb Vulnerabilities CVE-2025-64446, CVE-2025-58034 1. Overview Fortinet FortiWeb is a Web Application Firewall WAF device widely deployed in enterprise systems to protect web applications from common threats. Since FortiWeb typically sits at a central protection layer,...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the path traversal vulnerability in the python AioHTTP library = 3.9.1 make sure to find a valid public facing directory such as "/static/" or "/assets/" Once you find it, go in main.py and replace the /static/ string with the one you found...

CVE-2026-108551 openapi-typescript-codegen through 0.31.0 Code Injection via Handlebars Templates

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 Captura de pantalla Uso ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Nota ! los resultados se guardarán automáticamente en vuln.txt puedes añadir un directorio común en...