CVE-2025-30208

CVE-2025-30208 — Vite – Beliebige Dateien lesen · v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Schweregrad: CVSS 5.3 Mittel netzwerkerreichbarer Dev-Server ⚠ Nur für autorisierte Sicherheitsengagements. Die unbefugte Nutzung gegen Systeme, die Ihnen nicht gehören oder für die Sie keine...

FUXAPWN

CVE-2026-25895 — FUXA = 1.2.9 अप्रमाणित पथ-भ्रमण से दूरस्थ कोड निष्पादन FUXA, एक Node.js-आधारित SCADA/HMI प्लेटफ़ॉर्म, के विरुद्ध अप्रमाणित, प्री-ऑथ मनमाना फ़ाइल लेखन। लिखने के बाद कई अलग-अलग प्राइमिटिव के माध्यम से दूरस्थ कोड निष्पादन की श्रृंखला। यह तब भी काम करता है जब secureEnabled = true...

CVE-2024-3912

Warum? Ich veröffentliche das, weil Mirai ein Haufen nerviger Wichser sind, die ständig mein Honeypot damit beschießen - ihr seid nicht die Malware, hinter der ich her bin. Verpisst euch bitte. Hier ist die nervige IP, über die sie ihre Malware verteilen, und das Standard-Payload-Skript...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Prova de conceito para CVE-2023-2825, uma vulnerabilidade de leitura arbitrária de arquivos no GitLab CE/EE 16.0.0. O script faz login com uma conta GitLab válida, cria a estrutura necessária de grupos públicos aninhados, cria um projeto público, faz upload de um anexo e usa o...

CVE-2025-47273-POC

setuptools Path Traversal CVE-2025-47273 📖 Panoramica Proof-of-concept di exploit per una vulnerabilità di path traversal in Python setuptools 78.1.1. Abusando della funzione downloadurl del componente PackageIndex, un attaccante può scrivere file arbitrari in qualsiasi posizione del filesystem —...

CVE-2024-46987

CVE-2024-46987 - Lettura Arbitraria di File Autenticata su Camaleon CMS Questo repository contiene uno script Proof of Concept PoC per CVE-2024-46987 , che consente la lettura arbitraria di file LFI / Path Traversal su Camaleon CMS. Descrizione È stata identificata una vulnerabilità di Path...

CVE-2026-79706

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-40541

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...

CVE-2026-19084

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

CVE-2021-43798

usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: errore: i seguenti argomenti sono obbligatori: -H/--host esempio: python3 grafana-exploit.py --host in caso di lettura riuscita di un file arbitrario mostra l'URL della richiesta e il comando curl root@kitploit: +RequestURL...

CVE-2025-61686_docker

CVE-2025-61686docker Início 1.build root@kitploit: docker-compose up --build 2.start root@kitploit: docker-compose up Fluxo de Reprodução 1.Construa uma session que atenda à condição de travessia root@kitploit: └─$ echo -en '"AAAA../../../tmp/flower"'|base64 -w0 | tr '+/' '-' | tr -d '='...

Jenkins-CVE-2024-23897-Lab

Laboratorio Jenkins CVE-2024-23897 Vulnerabilità di lettura di file arbitrari in Jenkins 2.441 e versioni precedenti. Avvio root@kitploit: docker-compose up -d Attacco automatico root@kitploit: docker exec -it attacker-host ./auto-exploit.sh Attacco manuale root@kitploit: docker exec -it...

CVE-2021-41278

CVE-2021-41277 Scanner batch di Metabase per vulnerabilità di lettura file arbitrari Versioni interessate: root@kitploit: metabase version = 1.0.0, = 0.40.5 metabase version = 1.40.5 Istruzioni per l'uso root@kitploit: usage: CVE-2021-41277.py -h -u URL -f FILE CVE-2021-41277 optional arguments:...

CVE-2024-24919---Poc

CVE-2024-24919 PoC un Proof of Concept di CVE-2024-24919 Leggi di più - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 La vulnerabilità consente a un attaccante remoto non autenticato di leggere il contenuto di un file arbitrario situato sul dispositivo interessato. Descrizione Potenzialmente...

CVE-2026-7275-moodle

CVE-2026-7275-moodle PoC e documentazione per CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs — Path Traversal / Arbitrary File Write che può portare a RCE sulle versioni di Moodle non ancora patchate. Disclaimer: Solo per ricerca di sicurezza autorizzata, audit e formazione...

CVE-2026-0740-mass

CVE-2026-0740 — Motore di exploit per target di massa Autore: 0xNuts Contributore: Cursor Repository: https://github.com/ExDev994/CVE-2026-0740-mass PoC per CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 — Unauthenticated Arbitrary File Upload che può portare a RCE. La vulnerabilità iniziale è...

CVE-2025-7847-POC

CVE-2025-7847 Wordpress-Plugin – POC für beliebigen Datei-Upload durch authentifizierte Abonnenten Wordpress-Plugin AI Engine 2.9.3 – 2.9.4 Proof of Concept Bitte beachten Sie, dass diese Schwachstelle nur dann ausgenutzt werden kann, wenn die Option „Public API“ aktiviert ist standardmäßig...

CVE-2024-23897

CVE-2024-23897 Dieses Repository stellt einen Proof-of-Concept von CVE-2024-23897 dar Entdeckt von sonarsource CVE-2024-23897 | Datei lesen in Jenkins Haftungsausschluss Dieser Code ist ein Proof-of-Concept der Schwachstelle. Ich ermutige niemanden, ihn auf Confluence-Instanzen zu verwenden, die...

CVE-2024-5932

Dieser Beitrag ist ein Forschungsartikel, veröffentlicht von EQSTLab. ❗❗ WICHTIG ❗❗ Es gibt derzeit gefälschte PoC-GitHub-Repositories, die xmrig ausführen. Weitere Informationen finden Sie unter den folgenden Links : URL1: https://x.com/win3zz/status/1828704644987511107 URL2:...

CVE-2026-40541

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...