Lucene search
+L

2751 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2022-22965-PoC_Payara

CVE-2022-22965 PoC - Download Arbitrário de Arquivos no Payara Exemplo mínimo de como reproduzir a vulnerabilidade CVE-2022-22965 Spring no Payara/Glassfish. Payload alternativo para Payara/Glassfish que permite ao usuário malicioso definir uma raiz web arbitrária, levando ao download arbitrário ...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon para Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivos Não Autenticado Uso python CVE-2024-9935.py http://example.com...

7.5CVSS8.7AI score0.0749EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 2:43 a.m.1 views

CVE-2024-4956-Sonatype-Nexus-Repository-Manager

CVE-2024-4956-Sonatype-Nexus-Repository-Manager O Sonatype Nexus Repository Manager fornece uma plataforma central para armazenar artefatos de build CVE-2024-4956 é uma vulnerabilidade de travessia de caminho path traversal no Sonatype Nexus Repository Manager que permite a um atacante criar uma...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/26 1:34 a.m.1 views

CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 - BELIEBIGER DATEI-DOWNLOAD Massensammlung von Datenbanken mit dem Plugin: COMJOOMANAGER, aus CMS: Joomla, Projekt entwickelt in Python 2.x, weitere Informationen finden Sie im YouTube-Video. CVE: 2017-18345 Risiko : Sicherheitsrisiko Hoch 0day.Today-ID: 29950 ExploitDB-id: 4425...

9.8CVSS8.9AI score0.02966EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.66 views

WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download

Themewinter Eventin contains a path traversal caused by relative path manipulation, letting attackers access arbitrary files on the server, exploit requires no specific privileges or user interaction. id: CVE-2025-47445 info: name: WordPress Eventin Themewinter ≤ 4.0.26 - Arbitrary File Download...

9.8CVSS8.9AI score0.05145EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.77 views

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

7.5CVSS7.8AI score0.11733EPSS
SaveExploits3References4
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.32 views

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

8.7CVSS8.8AI score0.01452EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/08/25 5:28 a.m.1 views

CVE-2025-9215

StoreEngine Poderoso Plugin WordPress de eCommerce para Pagamentos, Assinaturas, Afiliados, Vendas e Mais = 1.4.0 - Download Arbitrário de Arquivos Autenticado Assinante+ O plugin StoreEngine contém uma vulnerabilidade em seu recurso de Importação/Exportação CSV que permite que qualquer usuário...

6.5CVSS5.2AI score0.00598EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:58 a.m.2 views

day04-nexus-4956

Tag 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 Was: Nicht authentifizierter Path-Traversal-Angriff ermöglicht es jedem, mit einer manipulierten URL beliebige Dateien herunterzuladen. Schwachstelle: Betrifft Nexus Repo 3 Versionen ≤ 3.68.0. Behoben in 3.68.1. Quelle: Sonatype Advisory +...

7.5CVSS7.8AI score0.18245EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/25 4:31 a.m.2 views

RP_Import_RCE

Real Player 'external::Import' Beliebiges Herunterladen von Dateien, Directory-Traversal-Schwachstellen führen zu Remote Code Execution Video-Demo: https://youtu.be/CONlijEgDLc Real Player nutzt Funktionen von Microsoft Internet Explorer und legt Eigenschaften und Methoden über ein spezielles,...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:29 a.m.2 views

CVE-2025-9345

Managefy의 파일 관리자, 코드 편집기 및 백업에서의 경로 탐색 개념 증명 취약점 유형: 경로 탐색 임의 파일 다운로드 영향 받는 함수: ajaxdownloadfile 영향: 낮은 권한의 인증된 사용자Subscriber 이상는 flmfile 매개변수의 검증 부족을 악용하여 민감한 구성 파일을 포함한 서버의 임의 파일을 다운로드할 수 있습니다. CVSS v3.1 점수: 6.5 Medium Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 설명 GET 요청의 flmfile 매개변수는 충분한 필터링...

4.9CVSS5.2AI score0.00499EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 4:28 a.m.2 views

CVE-2024-46987

CVE-2024-46987 Exploit - Camaleon CMS Path Traversal Cet outil exploite une vulnérabilité de type Path Traversal dans Camaleon CMS CVE-2024-46987. Il permet le téléchargement arbitraire de fichiers et inclut une fonctionnalité automatisée pour tenter de récupérer les clés SSH des utilisateurs...

7.7CVSS5.2AI score0.1456EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/24 11:44 p.m.3 views

CVE-2025-30567

Introdução Download Não Autorizado de Arquivos Arbitrários no WordPress WP01! Configuração do ambiente Passo 1: Baixe o plugin WP01, mas... Haha, não se preocupe, aqui está o código-fonte do plugin. Passo 2: Empacote a pasta wp01 fornecida e envie-a para a seção de plugins do WordPress, assim--...

7.5CVSS0.02786EPSS
SaveExploits0
CVE
CVE
added 2026/08/24 11:54 a.m.10 views

CVE-2026-28167

CVE-2026-28167 is an unauthenticated arbitrary file download vulnerability in the WordPress Super Forms plugin affecting versions 6.3.315 and below . The flaw allows a remote attacker to download arbitrary files from the server without authentication, leading to a high confidentiality impact (CVS...

7.5CVSS5.1AI score0.00373EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 11:54 a.m.35 views

CVE-2026-28167 WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...

7.5CVSS0.00373EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 11:54 a.m.10 views

EUVD-2026-64796

Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...

7.5CVSS5.3AI score0.00373EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/21 5:55 a.m.2 views

CVE-2024-9047

POC - WordPress File Upload Plugin, in der Datei wfufiledownloader.php vor Version = 4.24.11 - CVE-2024-9047 Übersicht Das WordPress File Upload Plugin ist aufgrund einer unsachgemäßen Eingabevalidierung in der Datei wfufiledownloader.php verwundbar, was Versionen = 4.24.11 betrifft. Diese...

9.8CVSS0.93339EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/19 11:58 a.m.2 views

CVE-2024-50508

CVE-2024-50508 WooCommerce Product Design = 1.0.0 - Nicht authentifizierter beliebiger Dateidownload Beschreibung Das WooCommerce Product Design Plugin für WordPress ist in allen Versionen bis einschließlich 1.0.0 anfällig für Directory Traversal. Dadurch ist es nicht authentifizierten Angreifern...

7.5CVSS0.01065EPSS
SaveExploits0
NVD
NVD
added 2026/08/18 3:17 p.m.5 views

CVE-2026-73383

Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...

4.9CVSS0.00352EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/18 3:17 p.m.6 views

CVE-2026-73181

Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce 7.6 versions...

7.5CVSS0.00467EPSS
SaveExploits0References1
Rows per page
Query Builder