TOTVS Fluig <= 1.7.0 - Arbitrary File Read

TOTVS Fluig platform contains a path traversal caused by base64-encoded manipulation of the 'file' parameter, letting attackers access arbitrary files, exploit requires attacker to control the 'file' parameter. id: CVE-2020-29134 info: name: TOTVS Fluig = 1.7.0 - Arbitrary File Read author: ls4ss...

Apache Tika - XXE Injection

Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE via malicious XFA in PDFs, allowing file read and SSRF attacks. id: CVE-2025-54988 info: name: Apache Tika - XXE Injection author: tx1ee severity: critical description: | Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE vi...

CVE-2026-85706-PoC-Toolkit

CVE‑2026‑85706 – Boîte à outils de lecture de fichiers non authentifiée GitLab USAGE ÉTHIQUE UNIQUEMENT – TESTS DE SÉCURITÉ AUTORISÉS Ce dépôt fournit des outils destinés exclusivement aux professionnels de la sécurité autorisés, aux blue teams et aux testeurs d'intrusion. Tout accès non autorisé...

ApacheSkywalking

ApacheSkywalking ApacheSKywalking SQLi لقراءة الملفات الحساسة...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 قراءة غير مصرح بها للملفات في Grafana 0day يبدو أن ثغرة 0day الجديدة من نوع LFI في Grafana موجودة بفضل إضافة grafana-clock-panel. يكفي إرسال طلب GET بالشكل التالي: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd قائمة الإضافات...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API Injection SQL PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Aperçu CVE-2026-26980 est une vulnérabilité d'injection SQL non authentifiée dans l'API Content de TryGhost Ghost CMS. Le chemin...

CVE-2026-98372

A flaw was found in the Linux kernel's IP Traffic Flow Security IP-TFS implementation within the XFRM subsystem. When processing incoming network traffic, a missing boundary check on packet fragment offsets allows an unbounded loop to read memory past the end of an on-stack array. A remote attack...

CVE-2026-98186

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A nearby wireless attacker can exploit this vulnerability by broadcasting crafted Wi-Fi beacon or probe response frames containing an excessively large pairwise cipher count. Because the driver fails to validate this count against the...

VmWare-vCenter-vulnerability

Vulnérabilités VMware VMware vCenter lecture arbitraire de fichiers non autorisée PoC fonctionnant sur les versions antérieures 7.0.2.00100 Requête Shodan pour membres privés uniquement PoC CVE-2021-21972 PoC | RCE non autorisée sur VMware CVE-2021-21972 PoC vmware ssrf poc | cve-2021-21975 poc...

CVE-2024-46987

CVE-2024-46987 – تجاوز المسار الموثَّق / قراءة الملفات التعسفية في Camaleon CMS CVE-2024-46987 هي ثغرة تجاوز مسار موثَّقة CWE-22 في Camaleon CMS نظام إدارة محتوى مبني على Ruby on Rails. تسمح لمستخدم مسجل حتى مع صلاحيات منخفضة بقراءة ملفات تعسفية على الخادم عبر إجراء...

CVE-2020-1206-POC

CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-1206 / "SMBleed" Expected outcome: Local file containing target computer kernel memory. Intended only for educational and testing in corporate...

EUVD-2025-211053

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

WinboxPoC

WinboxExploit هذا هو دليل إثبات المفهوم للثغرة الحرجة في WinBox CVE-2018-14847 والتي تسمح بقراءة الملفات التعسفية لكلمات المرور النصية العادية. لقد تم إصلاح الثغرة منذ فترة طويلة، لذلك انتهى هذا المشروع ولن يتم دعمه أو تحديثه بعد الآن. يمكنك عمل fork له وتحديثه بنفسك بدلاً من ذلك. منشور المدونة...

CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...

PT-2026-108770

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk protocol in bpf sock destroy sk protocol lives in struct sock, not in struct sock common. A timewait or request sock handed to bpf sock destroy by the tcp iterator is neither, so reading sk-sk...

EUVD-2026-95970

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

PT-2026-108761

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handle incoming queue pulls pull to bytes into the head before calling eth type trans. pull to is the length of the first RX slot, capped at RX COPY THRESHOLD, and that...

CVE-2026-75353

The OpENer v2.3 (commit 76b95cf) software contains an out-of-bounds read vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . This flaw could allow a remote attacker to trigger a denial of service condition. No specific exploit details or remediation steps are pro...

EUVD-2026-95902

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service...

CVE-2026-75349

The EIPStackGroup OpENer software, version v2.3.0/master (up to commit 76b95cf ), is vulnerable to an out-of-bounds read vulnerability during Connection Manager request parsing . This flaw allows a remote attacker to trigger a denial of service (DoS) . No specific exploitation details or remediat...