CVE-2024-23334-PoC

CVE‑2024‑23334 Path Traversal - PoC I created this script to automate the exploitation of CVE‑2024‑23334 on the Hack The Box Chemistry machine. This vulnerability affects aiohttp versions ≥ 1.0.5 and 3.9.2 when the application is configured to serve static files with followsymlinks=True, allowing...

CVE-2026-96898

A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...

CVE-2020-9484

Vulnerabilidad de deserialización de Apache Tomcat CVE-2020-9484 Configuración del objetivo vulnerable Clona este repositorio Ejecuta docker-compose up -d ¡Eso es todo! POC del exploit Ejecuta curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx Se...

CVE-2020-3452-Cisco-Python-Scanner

Escáner CVE-2020-3452 Un escáner de Python seguro y no destructivo para Cisco ASA / FTD WebVPN Directory Traversal CVE-2020-3452. CVE-2020-3452 es una vulnerabilidad crítica de path traversal sin autenticación que permite a atacantes remotos leer archivos arbitrarios en el dispositivo Cisco ASA o...

HackTheBox-Facts

HTB Facts — 完整 Writeup 难度： 中等 操作系统： Linux 标签： Web, MinIO, Camaleon CMS, 路径遍历, SSTI, 权限提升 目录 1. 信息收集 2. Web 枚举 — 端口 80 3. MinIO 发现 — 端口 54321 4. Camaleon CMS — 管理员访问 5. 权限提升至管理员角色 6. MinIO 凭证发现 7. 任意文件读取 — CVE-2024-46987 8. SSH 访问 trivia 用户 9. 权限提升至 Root 10. Flag 信息收集 首先进行全 TCP 端口扫描以识别开放服务。...

CVE-2026-88533

CVE-2026-88533: Escritura Arbitraria de Archivos No Autenticada → RCE como Root en QAnything ID de CVE : CVE-2026-88533 asignado por MITRE, publicación del registro pendiente Producto : QAnything de netease-youdao — plataforma de código abierto de RAG / QA sobre bases de conocimiento Afectado :...

Grafana-Password-Decryptor

Grafana Password Decryptor Kit de herramientas en Python para descifrar y crackear contraseñas de Grafana en múltiples formatos. Creado por: strikoder ¿Qué Hace Esta Herramienta? Maneja dos tipos de almacenamiento de contraseñas de Grafana: 🔐 AES-256 Base64 tabla datasource → Descifra directament...

CVE-2024-34470

CVE-2024-34470 PoC y Escáner Masivo Descripción general Este es un escáner de prueba de concepto PoC y masivo para CVE-2024-34470: la vulnerabilidad de Path Traversal en HSC Mailinspector afecta a todas las versiones hasta la 5.2.18. Cómo usar PoC en acción: Escaneo de objetivo único Para escanea...

CVE-2026-96898 yhx070424 ShopXO Ueditor Upload ueditor.php path traversal

A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...

EUVD-2026-85789

A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...

CVE-2026-96898

The yhx070424 ShopXO software (up to version 2.2.7 ) is vulnerable to a path traversal flaw in the Ueditor Upload Interface component. The vulnerability exists within an unknown functionality of the config/ueditor.php file, where the manipulation of the path_type argument allows for remote attack...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 未认证路径遍历...

CVE-2019-2615

CVE-2019-2615 GET /beawlsmanagementinternal2/wlmanagement HTTP/1.1 Host: 192.168.5.137:7001 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:66.0 Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/ ;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encodin...

CVE-2026-96884

A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the...

WordPress Core - PHP Template Path Traversal

An unauthenticated attacker can make getpagetemplate page-template resolution include a chosen readable local .php file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE. id: CVE-2026-87902 info: name: WordPress...

sudowp-dropzone-elementor

SudoWP DropZone for Elementor 贡献者: SudoWP, WP Republic 原作者: WEB-SHOP-HOSTING 标签: elementor, dropzone, upload, 安全补丁, fork, cve-2024-5153, honeypot 最低要求: 5.6 测试至: 6.7 稳定版本: 1.7.17 许可证: GPLv2 或更高版本 安全声明 这是已废弃的 "Startklar Elementor Addons" 插件（v1.7.15）的社区维护分支 。原插件已被弃用，且包含未修复的安全漏洞。 此版本修补了...

vaultize_CVE-2024-36079

Acerca de la vulnerabilidad La versión on-premise de Vaultize DRM v.21.07.27 es vulnerable a la subida de archivos arbitrarios. Los archivos cuyos nombres contienen parte de la ruta absoluta del sistema de archivos pueden subirse debido a la falta de filtrado de nombres de archivo. Al intentar...

CVE-2019-1002101-Helpers

kubectlcpCVE-2019-1002101 Scripts auxiliares de PoC y Dockerfile para CVE-2019-1002101 Para información detallada, visite https://www.twistlock.com/labs-blog/disclosing-directory-traversal-vulnerability-kubernetes-copy-cve-2019-1002101/ y...

CVE-2026-96884

A security flaw exists in MantisZip versions up to 0.4.5 . The vulnerability is located in the Path.Combine function within the MainWindow.UI.cs file of the Preview component. This flaw allows for path traversal , which can be triggered remotely. Public exploits are available for this vulnerabili...

EUVD-2026-85780

A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the...