CVE-2024-24919-POC

CVE-2024-24919-POC Leggi a riguardo - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 La vulnerabilità consente a un attacker remoto non autenticato di leggere il contenuto di un file arbitrario situato sul dispositivo interessato. Template Nuclei:...

CVE-2024-3400

CVE-2024-3400 Descrizione Una vulnerabilità di iniezione di comandi, derivante da una debolezza di creazione arbitraria di file nella funzionalità GlobalProtect del software PAN-OS di Palo Alto Networks, per specifiche versioni di PAN-OS e distinte configurazioni di funzionalità, può consentire a...

CVE-2021-42362

CVE-2021-42362 Il plugin WordPress Popular Posts di WordPress è vulnerabile a caricamenti arbitrari di file a causa di una validazione insufficiente del tipo di file in ingresso, individuata nel file /src/Image.php, che consente ad attaccanti con accesso di livello contributor o superiore di...

CVE-2025-30208-Vite

CVE-2025-30208 | Script Vite Esta ferramenta é usada para detectar se o sistema de destino possui a vulnerabilidade CVE-2025-30208. Essa vulnerabilidade permite que um atacante leia arquivos sensíveis no servidor por meio de caminhos específicos como /etc/passwd ou C:\windows\win.ini. A ferrament...

Dirty-Pipe-CVE-2022-0847

Dirty-Pipe-CVE-2022-0847 CVE-2022-0847 Dirty Pipe è una vulnerabilità di sovrascrittura arbitraria di file che consente l'escalation dei privilegi modificando o sovrascrivendo file arbitrari di sola lettura come /etc/passwd, /etc/shadow. Passaggi 1. Compilare usando gcc cve-2022-0847-exploit.c -o...

CVE-2024-57785

CVE-2024-57785 root@kitploit: Exploit Title: Authenticated File Inclusion Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57785 Usage: CVE-2024-57785.py -h -u URL -f FILE optional...

CVE-2024-57784

CVE-2024-57784 root@kitploit: Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional...

CVE-2021-43798

CVE-2021-43798 root@kitploit: ┌─✗─s1gh@parrot─/Desktop └──╼ $ python3 grafanapathtraversal.py -H "http://example-url:3000" Read file /etc/passwd root:x:0:0:root:/root:/bin/ash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin...

CVE-2025-52691

CVE-2025-52691 SmarterMail Build 9406 और पुराने संस्करण मनमानी फ़ाइल अपलोड की कमज़ोरी से ग्रस्त हैं। एक अप्रमाणित हमलावर मेल सर्वर पर किसी भी स्थान पर मनमानी फ़ाइलें अपलोड कर सकता है, जिससे संभावित रूप से रिमोट कोड निष्पादन संभव हो सकता है। यह पहचान विधि कैसे काम करती है? /interface/root/login पर...

CVE-2025-34299

CVE-2025-34299 Le versioni 2.11 e precedenti di Monsta FTP presentano una vulnerabilità che consente il caricamento arbitrario di file senza autenticazione. Questa falla permette agli attaccanti di eseguire codice arbitrario caricando un file appositamente concepito da un server SFTP malevolo. Co...

CVE-2023-40028

CVE-2023-40028 PoC Exploit Vulnerabilità di caricamento di symlink in Ghost CMS che porta alla lettura arbitraria di file POC Image Dettagli della vulnerabilità CVE-2023-40028 è una vulnerabilità in Ghost CMS versioni precedenti alla 5.59.1 , in cui gli utenti autenticati possono caricare link...

CVE-2026-81838

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code awsdac in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third part...

CVE-2026-75889

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

CVE-2026-59294

ResourceCacheService.getCacheName builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new FileresourceParentFolder, newFileName before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 -...

CVE-2026-59291

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-54732

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2026-53580

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-54687

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

vRealizeLogInsightRCE

VMSA-2023-0001 POC für VMSA-2023-0001, der VMware vRealize Log Insight betrifft und die folgenden CVEs enthält: Sicherheitslücke bezüglich Directory Traversal in VMware vRealize Log Insight CVE-2022-31706 Sicherheitslücke in der Zugriffskontrolle von VMware vRealize Log Insight CVE-2022-31704...

CVE-2023-43838

CVE-2023-43838 पर्सनल मैनेजमेंट सिस्टम v1.4.64 में एक मनमाना फ़ाइल अपलोड भेद्यता, हमलावरों को उपयोगकर्ता प्रोफ़ाइल के अवतार में एक तैयार SVG फ़ाइल अपलोड करके मनमाना कोड निष्पादित करने की अनुमति देती है। अतिरिक्त जानकारी 1. निम्नलिखित सामग्री के सा�ए alert.svg बनाएं: root@kitploit: alert"huntr.dev...