141866 matches found
fix-CVE-2020-15228
Fix CVE-2020-15228 set-env, add-path in Github-Actions This script changes lines in your github action file. You give it a directory name, and it searches for all files with the ".sh" or ".yml" extension. It recognizes these lines: echo ::set-env name=FOOBAR::$FOOBAR echo ::set-env...
cve-2023-50164-poc
PoC for CVE-2023-50164 Install To install this tool you must have Go version at least 1.20 installed and configured. $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest Alternatively, you can compile it by DIY: $ git clone http://github.com/dwisiswant0/cve-2023-50164-poc...
CVE-2021-41773-Apache-Path-Traversal-Lab
Apache CVE-2021-41773 Security Lab A controlled cybersecurity lab developed during my internship at ITSOLERA PVT LTD to study and demonstrate CVE-2021-41773 , a path traversal and potential remote code execution vulnerability affecting Apache HTTP Server 2.4.49. 📌 Project Overview This project...
CVE-2026-110867
Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset. Attackers controlling an externally sourced preset can override variables like PATH, LDPRELOAD, NODEOPTIONS, or GITSSLCAINFO i...
CVE-2023-50164-Apache-Struts-RCE
CVE-2023-50164: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code...
CVE-2024-48990-PoC-Testing
CVE-2024-48990-PoC-Testing 🐍🔓 This repository contains a Proof of Concept PoC to demonstrate a vulnerability in theneedrestart program, which fails to set Python's path correctly, leading to potential privilege escalation. The PoC highlights a potential path for gaining elevated privileges by...
CVE-2016-10140-Zoneminder-Poc
ZoneMinder Unauthorized Access CVE-2016-10140 Poc -- Batch Verification Script Vulnerability Description ZoneMinder is an open-source video surveillance system. When abnormal events occur, you can receive email or SMS notifications. There is an information disclosure and authentication bypass...
s2-067-CVE-2024-53677
s2-067-CVE-2024-53677 s2-067CVE-2024-53677 Summary File upload logic is flawed, and allows an attacker to enable paths with traversals - similar problem as reported in S2-066 Who should read this All Struts 2 developers and users Impact of vulnerability Remote Code Execution Maximum security rati...
CVE-2026-110867
Versions of Renovate prior to 44.60.1 are vulnerable to an allowlist bypass where repositories can set restricted environment variables by embedding them within a shared preset . An attacker who controls an externally sourced preset can override critical environment variables, such as PATH , LD_P...
CVE-2026-110860
The GitPython library (versions 3.1.62 before 3.2.0 ) is vulnerable to a symlink path traversal flaw within the Submodule.move() function. The root cause is that the function performs only lexical destination checks and fails to reject symbolic links in intermediate path components. An attacker p...
CVE-2026-110858
GitPython versions 3.1.30 before 3.2.0 are vulnerable to remote code execution via a command injection flaw in the Remote.pull() function. The root cause is that the unsafe-option guard only inspects keyword arguments and fails to validate the positional refspec . An attacker who controls the ref...
CVE-2026-110852
The n8n workflow automation tool versions prior to 1.123.83 , 2.x before 2.41.4 , and 2.42.x before 2.42.1 are vulnerable to an authentication bypass (CWE-288). The root cause is that dynamic-path webhook resolution matches requests based solely on the path, failing to validate the server-generat...
CVE-2024-45241
POC - CVE-2024-45241: Path Traversal in CentralSquare's CryWolf Vulnerability Overview CVE Identifier: CVE-2024-45241 Product: CentralSquare CryWolf False Alarm Management Affected Component: GeneralDocs.aspx Vulnerability Type: Path Traversal Discovery Date: 2024-08-09 Description A path travers...
CVE-2024-24919
CVE-2024-24919 Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN. BTW. Great article, that was my inspiration to write this simple template at 2:00 AM. Resource: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/...
CVE-2024-32113-POC
Apache OfBiz vulns POC for CVE-2024-32113 The USERNAME and PASSWORD params can be provided at the /ecomseo/AnonContactus interface, which is publicly accessible to anyone. POC1：RCE curl --noproxy '' -k --location --request POST...
cpanel2shell-scanner
cpanel2shell-scanner A high-fidelity scanner for the cPanel/WHM authentication bypass tracked as CVE-2026-41940. It identifies vulnerable hosts without producing the false-negatives common to public proofs-of-concept and detections, and without triggering the account lockout and root-IP-allowlist...
CVE-2021-38817-Remote-OS-Command-Injection
CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remote OS Command Injection/Remote Code Execution in TastyIgniter v3.0.7 Sendmail web part CVE-2021-38817 An authenticated remote OS command injection vulnerability exists in the TastyIgniter v3.0.7 Restaurtant CMS Sendmail configuration me...
CVE-2025-8088
CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...
CVE-2022-37122-Exploit
CVE-2022-37122 Path Traversal Scanner A robust and feature-rich scanner for detecting the Carel pCOWeb logdownload.cgi path traversal vulnerability CVE-2022-37122. Designed for security researchers and authorized penetration testers. 🚨 Important Notice EDUCATIONAL / BUG BOUNTY USE ONLY This tool ...