msf-cve-2024-46987

MSF-CVE-2024-46987 Módulo de Metasploit para explotar CVE-2024-46987 - una vulnerabilidad de path traversal autenticada en Camaleon CMS versiones = 2.8.0 y 2.9.0 Basado en este POC de Goultarde...

CVE-2026-25732-NiceGUI-3.6.1

Author: Mohammed Idrees Banyamer Contact: Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE-2026-25732 — NiceGUI Path Traversal in FileUpload → Arbitrary File Write Exploit Title: NiceGUI Path Traversal in FileUpload Leading to Arbitrary File Write Date: 2025-06-06 Tested on:...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

CVE-2025-55752

CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability Docker-based reproduction environment for CVE-2025-55752, a path traversal vulnerability in Apache Tomcat 10.1.44. Overview CVE-2025-55752 is a path traversal vulnerability in Apache Tomcat's RewriteValve caused by incorrect processing...

CVE-2021-41773-exercise

CVE-2021-41773-exercise A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by...

zenml-CVE-2024-2083-POC

CVE-2024-2083 – ZenML Prueba de Concepto de Lectura Arbitraria de Archivos Este repositorio demuestra cómo reproducir CVE-2024-2083 , una vulnerabilidad de Lectura Arbitraria de Archivos en ZenML. El problema permite a un atacante leer archivos del sistema de archivos del servidor abusando del...

CVE-2022-41352

CVE-2022-41352 PoC How does this detection method work? As stated on the advisories an issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0, the template looks at the following versions: root@kitploit: - "8.8.15" - "9.0" How do I run this script? 1. Download Nuclei from here 2. Copy th...

CVE-2021-43798

CVE-2021-43798 Grafana unauthorized arbitrary file reading vulnerability On December 4, 2021, a security researcher revealed an arbitrary file reading vulnerability in Grafana on the Internet. Unauthorized attackers can use this vulnerability to obtain sensitive files on the server. The...

wheelaudit

wheelaudit Python Wheel File Security Scanner — scan .whl files for security issues before installation. Motivated by recent CVEs in Python wheel handling: CVE-2026-24049 : Path traversal in wheel unpack allows permission manipulation of system files CVE-2026-1703 : Path traversal when pip instal...

tapo-c260-rce

Tapo C260 RCE Chain CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Proof-of-concept exploit chain for TP-Link Tapo C260 IP camera achieving unauthenticated-to-root RCE by chaining three vulnerabilities discovered by Eugene Lim Spaceraccoon. Credit All vulnerability research and discovery byEugene...

cve-2026-21440-writeup-poc

cve-2026-21440 path traversal to arbitrary file write in @adonisjs/bodyparser overview a critical path traversal vulnerability exists in the @adonisjs/bodyparser package that allows remote attackers to write arbitrary files outside the intended upload directory. when the multipartfile.move functi...

Exploit-CVE-2026-1357

Install dependencies pip3 install pycryptodome requests Basic exploit python3 wpvivi.py http://target.com Custom webshell python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Technical explanation: Null Byte Key: When RSA decryption fails, it...

-Grafana-LFI-CVE-2021-43798

🚀 Grafana LFI Exploit CVE-2021-43798 Script de automatización en Python 3 para explotar la vulnerabilidad de Local File Inclusion LFI en Grafana versiones de la 8.0.0 a la 8.3.0. Este exploit permite realizar un directory traversal para leer archivos sensibles del sistema operativo sin...

CVE-2024-36991-Splunk

CVE-2024-36991 — Splunk Path Traversal interactive POC for the Splunk Enterprise path traversal vulnerability on Windows. Vulnerability Info...

CVE-2026-91123

Discourse is an open-source discussion platform. Prior to 2026.1.8, 2026.6.3, 2026.7.2, and 2026.8.0, the iframe src traversal guard did not treat literal backslashes as path separators after decoded dot segments. A crafted source could therefore pass an allowediframes subpath check while browser...

Centreon-Exploits-2026

Exploits for CVE-2026-2749, CVE-2026-2751 and CVE-2026-2750 This repository contains exploits for CVE-2026-2749, CVE-2026-2751, and CVE-2026-2750 in Centreon, exploiting Path Traversal, SQL Injection, and Command Injection vulnerabilities. Vulnerable Versions All versions prior to 25.10 24.10 24....

CVE-2024-55457-PoC

CVE-2024-55457-PoC MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of...

cve-2026-21962

CVE-2026-21962 — PATH-TRAVERSAL EOP / RCE DUE TO URI NORMALIZATION Discoverer: gregk4sec https://github.com/gregk4sec/cve Discovery Date: 2025-09-24 Affected Vendor: Oracle Affected Product: Oracle OHS / Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS...

slippy-book-exploit

Slippy-book: EPUB File Parsing Directory Traversal Remote Code Execution CVE-2023-44451 Xreader, CVE-2023-52076AtrilReserved: RCE Vulnerability affected popular Linux Distros including Mint, Kali, Parrot, Manjaro etc. EPUB File Parsing Directory Traversal Remote Code Execution A Critical Path...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project’s Tiny File Manager = 2.4.3 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve code execution o...