Lucene search
+L

49152 matches found

Kitploit
Kitploit
added 2026/08/26 9:00 p.m.4 views

CVE-2024-3400

CVE-2024-3400 Semplice codice Python per verificare il caricamento arbitrario su un PaloAlto Controlla semplicemente i codici di stato restituiti dal paloalto prima e dopo la creazione del file. Questo crea un nome file generato casualmente e tenta di richiamarlo dopo il POST. Questo salverà un...

10CVSS8.9AI score0.99999EPSS
SaveExploits46References1
Kitploit
Kitploit
added 2026/08/26 8:47 p.m.3 views

Jenkins-CVE-2024-23897

Jenkins CVE-2024-23897 PoC Una proof-of-concept PoC per CVE-2024-23897, una vulnerabilità di lettura arbitraria di file nell'interfaccia a riga di comando CLI integrata di Jenkins. Consente ad attaccanti non autenticati con autorizzazione Overall/Read di leggere file arbitrari sul file system del...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/08/26 8:41 p.m.5 views

CVE-2024-36837

README.md CVE-2024-36837 Avviso L'interfaccia runtimeLog/download di 智联云采 SRM2.0 presenta una vulnerabilità di lettura arbitraria dei file. Un attaccante non autenticato può sfruttare questa vulnerabilità per leggere file importanti del sistema come file di configurazione del database, file di...

7.5CVSS5.2AI score0.08306EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 8:35 p.m.5 views

CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

Apache CXF XOP Include LFI CVE-2022-46364 Übersicht Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2022-46364 , eine Local File Inclusion LFI-Sicherheitslücke in Apache CXF. Die Sicherheitslücke entsteht durch unsachgemäße Handhabung von XOP XML-binary Optimized Packaging...

9.8CVSS6.3AI score0.02371EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 8:29 p.m.3 views

CVE-2025-3616

Metasploit-Modul: Greenshift WordPress Plugin – Beliebiges Datei-Upload CVE-2025-3616 Dieses Repository enthält ein Metasploit-Modul zur Ausnutzung von CVE-2025-3616 , einer Schwachstelle für beliebiges Datei-Upload im Greenshift WordPress Plugin Versionen 11.4 bis 11.4.5. Der Exploit ermöglicht...

8.8CVSS9AI score0.02439EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 8:29 p.m.4 views

CVE-2021-43798-Grafana

CVE-2021-43798 Grafana Beliebige Dateien lesen 1.Installation root@kitploit: pip3 install -r requirements.txt 2.Verwendung root@kitploit: $ python3 grafana.py -h / | \ \ / / | | | \ / \ | \ / | | || | | / | | / \ | | \ \ / / | | | | | | | | | | | || | | \ / / | | / \ | | \ V / | | || / / | || | /...

7.5CVSS8.6AI score0.88503EPSS
SaveExploits45
Cvelist
Cvelist
added 2026/08/26 8:26 p.m.36 views

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

7.7CVSS0.00316EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/26 8:26 p.m.15 views

CVE-2026-61792

Weblate , a web-based continuous localization platform, is affected by a path traversal vulnerability in its App store metadata download feature (versions prior to 2026.7 ). Attacker-influenced paths are resolved without adequate confinement to the repository, allowing a user with project-adminis...

7.7CVSS5.6AI score0.00316EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/26 8:26 p.m.5 views

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

7.7CVSS5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/26 8:24 p.m.1 views

Grafana-Decryptor-for-CVE-2021-43798

Decriptor Grafana per CVE-2021-43798 Questo script decripta le password delle DataSource da un'istanza Grafana vulnerabile a CVE-2021-43798, che consente la lettura non autorizzata di file arbitrari. Descrizione Le versioni di Grafana dalla 8.0.0-beta1 alla 8.3.0 sono vulnerabili a una...

7.5CVSS8.8AI score0.88503EPSS
SaveExploits45References1
Kitploit
Kitploit
added 2026/08/26 8:18 p.m.4 views

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 أداة أمنية مبنية على بايثون لكشف واستغلال ثغرة قراءة ملف عشوائية في إضافة WP File Upload لووردبريس الإصدارات = 4.24.11...

9.8CVSS8.9AI score0.93339EPSS
SaveExploits4
NVD
NVD
added 2026/08/26 8:17 p.m.8 views

CVE-2026-75327

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...

0.00139EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 7:54 p.m.4 views

CVE-2021-36749

CVE-2021-36749 Apache Druid lecture de fichier arbitraire Version concernée : version = 0.21.1 Les deux méthodes suivantes peuvent être utilisées Méthode en ligne de commande root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST ...

6.5CVSS6.9AI score0.81038EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 7:35 p.m.4 views

CVE-2025-56499

CVE-2025-56499 قراءة ملف عشوائي عبر عدم التحقق من صحة المسار في موفر القاعدة المحلي الإصلاح في المصدر: https://github.com/MetaCubeX/mihomo/pull/2177 الإصدارات المتأثرة: mihomo = v1.19.11 ملخص عند تحليل تكوين rule-providers، يفشل الفرع type = "file" في التحقق من صحة المسار المقدم. يمكن للمهاجم...

6.5CVSS5.2AI score0.00304EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/26 7:34 p.m.4 views

CVE-2026-21440

CVE-2026-21440 PoC avanzato solo di rilevamento per CVE-2026-21440 che interessa AdonisJS BodyParser. Nessuno sfruttamento incluso. CVE-2026-21440 – PoC di rilevamento avanzato per AdonisJS Descrizione Questo progetto fornisce un Proof of Concept PoC avanzato solo di rilevamento per CVE-2026-2144...

9.2CVSS8.9AI score0.01049EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 7:33 p.m.2 views

day03-jenkins-23897

Dia 3 — Leitura arbitrária de arquivos via CLI do Jenkins CVE-2024-23897 Ideia: Jenkins ≤ 2.441 LTS ≤ 2.426.2 expande @/path dentro de argumentos da CLI. Usuários não autenticados podem fazer o Jenkins ler arquivos locais e refletir suas primeiras linhas através da saída de ajuda da CLI. Corrigid...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/08/26 7:19 p.m.7 views

CVE-2025-63298

CVE-2025-63298 È stata identificata una vulnerabilità di path traversal in SourceCodester Pet Grooming Management System 1.0, che interessa il componente admin/managewebsite.php. Un utente autenticato con privilegi amministrativi può sfruttare questa falla inviando una richiesta POST appositament...

8.2CVSS5.3AI score0.00484EPSS
SaveExploits1
NVD
NVD
added 2026/08/26 7:16 p.m.6 views

CVE-2026-63179

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

4.9CVSS0.00351EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/26 7:16 p.m.5 views

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

7.5CVSS0.00427EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/26 7:16 p.m.6 views

CVE-2025-61165

An arbitrary file upload vulnerability in the /v1/mydrive/batchupload component of cohere North AI v1.1.5 allows attackers to exeute arbitrary code via uploading a crafted file...

9.8CVSS0.00352EPSS
SaveExploits0References3
Rows per page
Query Builder