CVE-2020-13941

CVE-2020-13941: Abusing UNC Paths in Windows Environments in Apache Solr Multiple Solr endpoints have been found to accept absolute paths. In Windows systems these absolute path can be forced to make the OS connect to an attacker-controlled SMB server. This behaviour may result in attacks such as...

trellix-tarslip-patch-bypass

trellix-tarslip-patch-bypass In 2023, Trellix announced 1 that they patched +61,000 open-source projects for CVE-2007-4559, an old path traversal vulnerability. Analyzing their patch, it's easy to notice that it can be bypassed using a symlink. Symlink path traversal is an old technique, and it h...

CVE-2020-3452

CVE-2020-3452 CVSS 7.5 base wget https://bit.ly/32Q065t wget https://vpn.target.local:443/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ wget...

CVE-2022-23378

CVE-2022-23378 : Reflected XSS in TastyIgniter v3.2.2 Restaurtant CMS Authenticated reflected XSS exists in the TastyIgniter Admin dashboard in version v3.2.2. Mitre URL: https://vulners.com/cve/CVE-2022-23378 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-23378 Proof of Concept POC: Admin...

AWS-SAM-CLI-Vulnerabilities

AWS SAM CLI Vulnerabilities CVE-2025-3047 & CVE-2025-3048 This README provides a detailed analysis of two security vulnerabilities found in the AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 and CVE-2025-3048 – along with the code-level issues and fixes. Both vulnerabilities...

CVE-2021-41773

CVE-2021-41773 Un sencillo script POC en bash para la vulnerabilidad de Path Traversal y RCE en Apache 2.4.49 Ejemplo de uso: Configura un listener de netcat: $ nc -nvlp Luego ejecuta el script: $ ./exploit.sh Descargo de responsabilidad Esta herramienta es solo con fines educativos. No me hago...

CVE-2026-66804-CrossDevice-Service-EoP

CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

cve2018-13379-nmap-script

cve2018-13379-nmap-script CVE-2018-13379 Script para Nmap NSE Una limitación inadecuada de una ruta de acceso a un directorio restringido "Path Traversal" en Fortinet FortiOS 6.0.0 a 6.0.4, 5.6.3 a 5.6.7 en el portal web SSL VPN permite a un atacante no autenticado descargar archivos del sistema...

CVE-2022-27925

CVE-2022-27925 Description On May 10, 2022, Zimbra released versions 9.0.0 patch 24 and 8.8.15 patch 31 to address multiple vulnerabilities in Zimbra Collaboration Suite, including CVE-2022-27924 which we wrote about previously and CVE-2022-27925. Originally, Zimbra called CVE-2022-27925 an...

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows 📌 Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...

Apache-CVEs

Apache-CVEs Exploit created in python3 to exploit known vulnerabilities in Apache web server CVE-2021-41773, CVE-2021-42013 What's apache The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows. The goa...

CVE-2025-31125

CVE-2025-31125 Exploit - Vite WASM Import Path Traversal 🛡️ This script is a proof-of-concept PoC exploit for CVE-2025-31125 , a vulnerability found in Vite. The exploit leverages a WASM Import Path Traversal issue to retrieve sensitive files from vulnerable servers running the Vite framework. It...

wordpress-true-ranker-cve-2021-39312

WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Python proof-of-concept for CVE-2021-39312 , affecting The True Ranker seo-local-rank WordPress plugin versions ≤ 2.2.2. Vulnerability Details CVE: CVE-2021-39312 Type: Arbitrary File Read Affected Plugin: The True Ranker Affected...

CVE-2023-4636

CVE-2023-4636 The vulnerability in the limelight is an unauthenticated remote code execution RCE issue stemming from insufficient controls on file paths occurring during image processing via Imagick. It enables adversaries to supply files via FTP, leading to local file inclusion and remote code...

CVE-2026-16475-PoC

CVE-2026-16475 - OCSinventory LFI PoC Local File Inclusion vulnerability in OCSinventory 2.12.4 Vulnerability Details CVE ID: CVE-2026-16475 CVSS Score: 6.9 Medium CWE: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program Affected Version: OCSinventory 2.12.4 Status:...

CVE-2023-2825

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug...

cve-2021-41773

Apache 2.4.49 - Path Traversal or Remote Code Execution cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-41773 If CGI-BIN is enabled...

cve-2014-0130

== CVE-2014-0130 Test Case Payload : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === Netsparker Detected : https://i.imgur.com/s1vahmj.png == HackerOne 1 - newrelic.com rails directory traversal vuln by droidsec - https://hackerone.com/reports/134032 == Reference 1...

vulnerable-mcp-servers-lab

Laboratorio di server MCP vulnerabili Questo repository contiene implementazioni volutamente vulnerabili di server Model Context Protocol MCP sia locali che remoti. Ogni server risiede nella propria cartella e include un README.md dedicato con tutti i dettagli su cosa fa , come eseguirlo e come...

insect

insect - Web path discovery Current Release: v1.4 20222.09.03 An advanced command-line tool designed to brute force directories and files in webservers, AKA web path scanner Idea by @maurosoria and @shelld3v Developement-2022 is being actively developed by @nu11secur1ty Table of Contents...