CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder A POC exploit for WinRAR vulnerability CVE-2025-8088 affecting versions 7.12 and lower 🚀 How It Works 1. Creates a Rar embed with other payloads 2. Using Multiple ADS Streams 🔄 - Attaches payload streams with different path traversal depths 3. Manipulates RAR Headers ...

CVE-2026-21436

CVE-2026-21436 eopkg = 4.3.4, the Solus OS package manager, writes files containing absolute paths in package contents directly to the specified directory during the installation of packages with the .eopkg extension. Even if the --destdir parameter, used to install the package to a specific...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

msf-cve-2024-46987

MSF-CVE-2024-46987 Módulo de Metasploit para explotar CVE-2024-46987 - una vulnerabilidad de path traversal autenticada en Camaleon CMS versiones = 2.8.0 y 2.9.0 Basado en este POC de Goultarde...

CVE-2026-25732-NiceGUI-3.6.1

Author: Mohammed Idrees Banyamer Contact: Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE-2026-25732 — NiceGUI Path Traversal in FileUpload → Arbitrary File Write Exploit Title: NiceGUI Path Traversal in FileUpload Leading to Arbitrary File Write Date: 2025-06-06 Tested on:...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability Docker-based reproduction environment for CVE-2025-55752, a path traversal vulnerability in Apache Tomcat 10.1.44. Overview CVE-2025-55752 is a path traversal vulnerability in Apache Tomcat's RewriteValve caused by incorrect processing...

CVE-2021-41773-exercise

CVE-2021-41773-exercise A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by...

zenml-CVE-2024-2083-POC

CVE-2024-2083 – ZenML Prueba de Concepto de Lectura Arbitraria de Archivos Este repositorio demuestra cómo reproducir CVE-2024-2083 , una vulnerabilidad de Lectura Arbitraria de Archivos en ZenML. El problema permite a un atacante leer archivos del sistema de archivos del servidor abusando del...

CVE-2022-41352

CVE-2022-41352 PoC How does this detection method work? As stated on the advisories an issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0, the template looks at the following versions: root@kitploit: - "8.8.15" - "9.0" How do I run this script? 1. Download Nuclei from here 2. Copy th...

CVE-2021-43798

CVE-2021-43798 Grafana unauthorized arbitrary file reading vulnerability On December 4, 2021, a security researcher revealed an arbitrary file reading vulnerability in Grafana on the Internet. Unauthorized attackers can use this vulnerability to obtain sensitive files on the server. The...

wheelaudit

wheelaudit Python Wheel File Security Scanner — scan .whl files for security issues before installation. Motivated by recent CVEs in Python wheel handling: CVE-2026-24049 : Path traversal in wheel unpack allows permission manipulation of system files CVE-2026-1703 : Path traversal when pip instal...

tapo-c260-rce

Tapo C260 RCE Chain CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Proof-of-concept exploit chain for TP-Link Tapo C260 IP camera achieving unauthenticated-to-root RCE by chaining three vulnerabilities discovered by Eugene Lim Spaceraccoon. Credit All vulnerability research and discovery byEugene...

cve-2026-21440-writeup-poc

cve-2026-21440 path traversal to arbitrary file write in @adonisjs/bodyparser overview a critical path traversal vulnerability exists in the @adonisjs/bodyparser package that allows remote attackers to write arbitrary files outside the intended upload directory. when the multipartfile.move functi...

Exploit-CVE-2026-1357

Install dependencies pip3 install pycryptodome requests Basic exploit python3 wpvivi.py http://target.com Custom webshell python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Technical explanation: Null Byte Key: When RSA decryption fails, it...

-Grafana-LFI-CVE-2021-43798

🚀 Grafana LFI Exploit CVE-2021-43798 Automation script in Python 3 to exploit the Local File Inclusion LFI vulnerability in Grafana versions 8.0.0 to 8.3.0. This exploit allows directory traversal to read sensitive operating system files without authentication. ✨ Features Python 3.10+ compatibili...

CVE-2024-36991-Splunk

CVE-2024-36991 — Splunk Path Traversal interactive POC for the Splunk Enterprise path traversal vulnerability on Windows. Vulnerability Info...

CVE-2026-91123

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the iframe src traversal guard did not treat literal backslashes as path separators after decoded dot segments. A crafted source could therefore pass an allowediframes subpath check while browser...

CVE-2018-20250

exp para Extraer Ejecución de Código de Winrar poc por Ridter ¿cómo usarlo? solo necesitas instalar Python 3.7 y preparar un archivo malicioso que quieras ejecutar, establecer los valores que desees, ¡este script exp generará el archivo malicioso automáticamente! 1. establece los valores que dese...

Centreon-Exploits-2026

Exploits for CVE-2026-2749, CVE-2026-2751 and CVE-2026-2750 This repository contains exploits for CVE-2026-2749, CVE-2026-2751, and CVE-2026-2750 in Centreon, exploiting Path Traversal, SQL Injection, and Command Injection vulnerabilities. Vulnerable Versions All versions prior to 25.10 24.10 24....