Vitejs-exploit

Vite 익스플로잇 CVE-2025-31125 설명: Vite 개발 서버의 @fs 엔드포인트에서 경로 순회 취약점CVE-2025-31125을 악용하여 조작된 URL을 통해 /etc/passwd 및 /etc/hosts와 같은 민감한 파일에 접근합니다. Muhammad Waseem 제작. 사용법: python viteexploit.py -u http://target.com python viteexploit.py -f urls.txt -o output.txt 요구 사항: Python 3.x pip install requests...

Path-Transversal-CVE-2025-31125-

Vite Exploit CVE-2025-31125 설명: Vite 개발 서버의 @fs 엔드포인트CVE-2025-31125에서 경로 탐색을 악용하여 조작된 URL을 통해 /etc/passwd 및 /etc/hosts와 같은 민감한 파일에 접근합니다. Harsh Gupta 제작. 사용법: python viteexploit.py -u http://target.com python viteexploit.py -f urls.txt -o output.txt 요구 사항: Python 3.x pip install requests colorama...

CVE-2025-31125

CVE-2025-31125 취약점 탐지 도구 CVE-2025-31125 취약점을 탐지하기 위한 Python 스크립트 도구입니다. 작성자 정보 Author: 大智 Date: 2025-04-01 기능 특징 단일 대상 탐지 지원 일괄 대상 탐지 지원 탐지 결과 자동 저장 컬러 출력 인터페이스 상세 탐지 로그 환경 요구 사항 Python 3.6 이상 Windows/Linux/MacOS 운영 체제 빠른 시작 1. 종속성 설치 一键安装所需依赖 pip install -r requirements.txt 2. 사용 방법 방법 1: 단일 대상...

CVE-2022-31125

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a specially crafted HTTP request. This affects Roxywi version...

Exploit for CVE-2025-31125

Vite Exploit CVE-2025-31125 Description: Exploits path tr...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125

Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-31125 DESCRIPTION: Vite is a frontend tooling...

Security Bulletin: Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation (CVE-2025-31125, CVE-2025-32395, CVE-2025-31486).

Summary Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation CVE-2025-31125, CVE-2025-32395, CVE-2025-31486. Vite is used by IBM Robotic Process Automation as part of the UI framework. This bulletin identifies the fixes required to address these vulnerabilities...

VulnCheck KEV: CVE-2025-31125

Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected...

Exploit for CVE-2025-31125

CVE-2025-31125 Exploit - Vite WASM Import Path Traversal 🛡️ T...

CVE-2025-31125 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse...

CVE-2025-31125 vulnerabilities

Vulnerabilities for packages: vitess...

@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +443 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)

vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...

@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +41 more potentially affected by CVE-2025-31125 via vite (>=6.1.0, <=6.1.2)

vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...

@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +57 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)

vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +508 more potentially affected by CVE-2025-31125 via vite (>=4.0.0, <=4.5.9)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...

CVE-2025-31125

Summary of CVE-2025-31125 (Vite): Vite’s dev server, when exposed to the network (e.g., via --host or server.host), can disclose content of non-allowed files through URL modifiers like ?inline&import or ?raw?import. The issue is specific to Vite when the dev server is reachable externally; it doe...

CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. This vulnerability is fixed in 6.2.4, 6.1.3,...

CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. This vulnerability is fixed in 6.2.4, 6.1.3,...

Exploit for CVE-2025-30208

ViteVulScan Vulnerabilities Overview This project involves...

Fedora 39 : magicmirror (2023-3a06c965b4)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3a06c965b4 advisory. Automatic update for magicmirror-2.24.0-1.fc39. Changelog Sun Jul 9 2023 Davide Cavalca - 2.24.0-1 - Update to 2.24.0; Fixes: RHBZ2184597,...