CVE-2026-19084 Shared Files < 1.7.70 - Unauthenticated Arbitrary File Read

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

CVE-2026-19084

shared-files-pro WordPress plugin versions before 1.7.70 fail to validate the file path supplied when creating a featured image. An unauthenticated attacker can exploit this to read arbitrary files from the server and republish their contents at a public URL, resulting in high confidentiality imp...

EUVD-2026-67569

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL...

CVE-2026-12513

CVE-2026-12513 affects the Shared Files WordPress plugin (before 1.7.67) and Shared Files Pro (before 1.7.68). The plugins fail to properly sanitize a file path taken from a frontend file submission, and their single-pass traversal filter is bypassable. An unauthenticated user can store a path po...

EUVD-2026-67565

The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.68 do not properly sanitize a file path taken from a frontend file submission and their single-pass traversal filter is bypassable, allowing unauthenticated users to store a path that points outside the...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 vulnerabilità di lettura arbitraria di file senza autorizzazione POC Endpoint vulnerabili: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml...

CVE-2020-19360

CVE-2020-19360 Fhem poc لقراءة ملف تعسفي بحث FOFA title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com اختبار عنوان URL واحد python3 Fhem.py -f url.txt فحص جماعي ملاحظة بعد الانتهاء من المسح، سيتم إنشاء ملف vulable.txt الذي يحتوي على الثغرات الأمنية تلقائي...

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform – Schwachstelle zum Lesen beliebiger Dateien CVE-2024-41713. Da in der NuPoint Unified Messaging NPM Komponente der Mitel MiCollab Software eine Schwachstelle zur Umgehung der Authentifizierung und unzureichende Eingabevalidierung...

3DPrint-Lite-1.9.1.4

3DPrint-Lite-1.9.1.4 Plugin WordPress 3DPrint Lite 1.9.1.4 - Caricamento file arbitrario...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC für CVE-2009-0229 "Druckerwarteschlangen-Dateileseschwachstelle" LPE AFR verwandt mit CVE-2020-1048 Details Autor: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC-Datum: 2010-xx-xx Veröffentlichungsdatum: 2020-05-14 erinnert/inspiriert durch...

wp-file-manager

wp-file-manager WP File Manager 6.9 - Caricamento arbitrario di file che porta a RCE root@kitploit: usage: wp-file-manager.py -h -u URL -f FILE optional arguments: -h, --help show this help message and exit -u URL, --url URL URL of host to check will need http or https -f FILE, --file FILE File o...

apache-cve-2021-41773-lab

Lab di Path Traversal Apache 2.4.49 — CVE-2021-41773 Clonazione root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Utilizzo Avvia il server vulnerabile: root@kitploit: ./apachelab.sh choose option 1 Exploit...

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment - Caricamento arbitrario di file Descrizione Il plugin Instant Appointment per WordPress è vulnerabile al caricamento arbitrario di file nelle versioni fino alla 1.2 inclusa. Ciò consente ad attaccanti non autenticati di caricare una...

CVE-2020-5902

Readme F5 BIG-IP lettura file arbitrari + esecuzione remota di comandi RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...

CVE-2021-43798

GrafanaArbitraryFileRead Utilizzo 1. mostra info root@kitploit: ❯ go run main.go -s INF VulnInfo: "Name": "Grafana Arbitrary File Read", "VulID": "nil", "Version": "1.0", "Author": "z3", "VulDate": "2021-12-07", "References": "https://nosec.org/home/detail/4914.html" , "AppName": "Grafana",...

CVE-2024-24919

Introduzione Semplice script Python POC che controlla e sfrutta la vulnerabilità Check Point CVE-2024-24919 Wrong Check Point; vulnerabile alla lettura arbitraria di file. Requisiti Python 3 Pip Librerie/Moduli Richiesti Installa tramite PIP requests urllib3 tqdm Come Eseguire root@kitploit: PS C...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer di WP Guru = 1.0.1.3 - Autorizzazione mancante per la lettura arbitraria di file senza autenticazione Descrizione Il plugin Error Log Viewer di WP Guru per WordPress è vulnerabile alla lettura arbitraria di file in tutte le versioni fino alla 1.0.1.3 inclusa, trami...

CVE-2021-3007-docker-poc

CVE-2021-3007 — RCE da deserializzazione HTTP in Laminas/Zend Questa repository contiene un Proof-of-Concept completamente riproducibile e un template di exploit Nuclei per CVE-2021-3007, una vulnerabilità critica di deserializzazione PHP in Zend\Http\Response\Stream laminas-http template di...

CVE-2025-52691

CVE-2025-52691 Dieses Repository enthält einen sicheren Proof of Concept PoC zur Erkennung anfälliger SmarterMail-Versionen, die von CVE‑2025‑52691 betroffen sind. Das Skript führt nur eine Versionserkennung durch und nutzt die Schwachstelle nicht aus. CVE-2025-52691 – SmarterMail Version Detecti...

CVE-2021-21972

CVE-2021-21972 Descrição da Vulnerabilidade cve-2021-21972 vulnerabilidade de execução de código Um atacante malicioso com acesso à porta 443 pode enviar requisições cuidadosamente elaboradas para o vCenter Server, resultando em execução remota arbitrária de código. Detecção da Vulnerabilidade 1....