49152 matches found
CVE-2024-3400
CVE-2024-3400 Semplice codice Python per verificare il caricamento arbitrario su un PaloAlto Controlla semplicemente i codici di stato restituiti dal paloalto prima e dopo la creazione del file. Questo crea un nome file generato casualmente e tenta di richiamarlo dopo il POST. Questo salverà un...
Jenkins-CVE-2024-23897
Jenkins CVE-2024-23897 PoC Una proof-of-concept PoC per CVE-2024-23897, una vulnerabilità di lettura arbitraria di file nell'interfaccia a riga di comando CLI integrata di Jenkins. Consente ad attaccanti non autenticati con autorizzazione Overall/Read di leggere file arbitrari sul file system del...
CVE-2024-36837
README.md CVE-2024-36837 Avviso L'interfaccia runtimeLog/download di 智联云采 SRM2.0 presenta una vulnerabilità di lettura arbitraria dei file. Un attaccante non autenticato può sfruttare questa vulnerabilità per leggere file importanti del sistema come file di configurazione del database, file di...
CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC
Apache CXF XOP Include LFI CVE-2022-46364 Übersicht Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2022-46364 , eine Local File Inclusion LFI-Sicherheitslücke in Apache CXF. Die Sicherheitslücke entsteht durch unsachgemäße Handhabung von XOP XML-binary Optimized Packaging...
CVE-2025-3616
Metasploit-Modul: Greenshift WordPress Plugin – Beliebiges Datei-Upload CVE-2025-3616 Dieses Repository enthält ein Metasploit-Modul zur Ausnutzung von CVE-2025-3616 , einer Schwachstelle für beliebiges Datei-Upload im Greenshift WordPress Plugin Versionen 11.4 bis 11.4.5. Der Exploit ermöglicht...
CVE-2021-43798-Grafana
CVE-2021-43798 Grafana Beliebige Dateien lesen 1.Installation root@kitploit: pip3 install -r requirements.txt 2.Verwendung root@kitploit: $ python3 grafana.py -h / | \ \ / / | | | \ / \ | \ / | | || | | / | | / \ | | \ \ / / | | | | | | | | | | | || | | \ / / | | / \ | | \ V / | | || / / | || | /...
CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...
CVE-2026-61792
Weblate , a web-based continuous localization platform, is affected by a path traversal vulnerability in its App store metadata download feature (versions prior to 2026.7 ). Attacker-influenced paths are resolved without adequate confinement to the repository, allowing a user with project-adminis...
CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...
Grafana-Decryptor-for-CVE-2021-43798
Decriptor Grafana per CVE-2021-43798 Questo script decripta le password delle DataSource da un'istanza Grafana vulnerabile a CVE-2021-43798, che consente la lettura non autorizzata di file arbitrari. Descrizione Le versioni di Grafana dalla 8.0.0-beta1 alla 8.3.0 sono vulnerabili a una...
WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal
WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 أداة أمنية مبنية على بايثون لكشف واستغلال ثغرة قراءة ملف عشوائية في إضافة WP File Upload لووردبريس الإصدارات = 4.24.11...
CVE-2026-75327
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...
CVE-2021-36749
CVE-2021-36749 Apache Druid lecture de fichier arbitraire Version concernée : version = 0.21.1 Les deux méthodes suivantes peuvent être utilisées Méthode en ligne de commande root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST ...
CVE-2025-56499
CVE-2025-56499 قراءة ملف عشوائي عبر عدم التحقق من صحة المسار في موفر القاعدة المحلي الإصلاح في المصدر: https://github.com/MetaCubeX/mihomo/pull/2177 الإصدارات المتأثرة: mihomo = v1.19.11 ملخص عند تحليل تكوين rule-providers، يفشل الفرع type = "file" في التحقق من صحة المسار المقدم. يمكن للمهاجم...
CVE-2026-21440
CVE-2026-21440 PoC avanzato solo di rilevamento per CVE-2026-21440 che interessa AdonisJS BodyParser. Nessuno sfruttamento incluso. CVE-2026-21440 – PoC di rilevamento avanzato per AdonisJS Descrizione Questo progetto fornisce un Proof of Concept PoC avanzato solo di rilevamento per CVE-2026-2144...
day03-jenkins-23897
Dia 3 — Leitura arbitrária de arquivos via CLI do Jenkins CVE-2024-23897 Ideia: Jenkins ≤ 2.441 LTS ≤ 2.426.2 expande @/path dentro de argumentos da CLI. Usuários não autenticados podem fazer o Jenkins ler arquivos locais e refletir suas primeiras linhas através da saída de ajuda da CLI. Corrigid...
CVE-2025-63298
CVE-2025-63298 È stata identificata una vulnerabilità di path traversal in SourceCodester Pet Grooming Management System 1.0, che interessa il componente admin/managewebsite.php. Un utente autenticato con privilegi amministrativi può sfruttare questa falla inviando una richiesta POST appositament...
CVE-2026-63179
Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...