CVE-2024-46377

CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...

grafana-exploit-CVE-2021-43798

grafana-exploit-CVE-2021-43798 About What is this exploit used for ? used for the Grafana Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798 allows access to local files using directory traversal What grafana versions will this exploit work for? will work for Grafana versions 8.0.0-bet...

CVE-2021-3007-docker-poc

CVE-2021-3007 — Laminas/Zend HTTP Deserialization RCE This repository contains a fully reproducible Proof-of-Concept and Nuclei exploit template for CVE-2021-3007, a critical PHP deserialization vulnerability in Zend\Http\Response\Stream laminas-http Nuclei exploit template ├── docker-compose.yml...

WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Forminator versions = 1.57.3...

CVE-2020-17519-Apache-Flink

CVE-2020-17519 Apache Flink Arbitrary File Read Affected Versions Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Usage python3 CVE-2020-17519 --help View usage help python3 CVE-2020-17519 -u...

CVE-2021-32804

CVE-2021-32804 This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm". Environment Setup docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Vulnerability Reproduction node-tar...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Unauthenticated Arbitrary File Upload Research by: Atomic Edge Severity: Critical | CVSS: 9.8 | Auth Required: None ⚠️ v2 — Technical corrections applied based on community feedback. See Changelog for details. Overview A critical unauthenticated arbitrary...

CVE-2022-31793

CVE-2022-31793 -u especificar IP -l especificar archivo de IPs -v modo de verificación -f especificar archivo a leer python poc.py -u ip -v python poc.py -l url.txt -v python poc.py -u ip -f /etc/hosts python poc.py -l url.txt -f /etc/hosts...

Tomcat_PUT_GUI_EXP

TomcatPUTEXPV1.4 Tomcat PUT Method Arbitrary File Write CVE-2017-12615 Graphical Exploitation Tool Vulnerability Introduction On September 19, 2017, Apache Tomcat officially confirmed and fixed two high-risk vulnerabilities, with CVE IDs: CVE-2017-12615 and CVE-2017-12616. Among them, the remote...

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ CVE-2025-8088 WinRAR Exploit Tool ☠️ SYSTEM ACCESS: GRANTED TARGET: WINRAR VULNERABILITY A sophisticated, military-grade GUI tool designed for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088. This tool leverages advanced NTFS Alternate Data...

CVE-2024-27460

CVE-2024-27460 - Plantronics Desktop Hub LPE Arbitrary File Delete to SYSTEM. Majority of code is based on the referenced PoC by @filipdragovic. Thanks @filipdragovic & @k0zmer : Blog Post: https://mantodeasecurity.de/en/2024/05/cve-2024-27460-plantronics-hub-lpe References...

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1...

CVE-2026-3891-Linux

███████╗██████╗ ██╗███████╗███╗ ██╗██████╗ ███████╗ ██╔════╝██╔══██╗██║██╔════╝████╗ ██║██╔══██╗██╔════╝ █████╗ ██████╔╝██║█████╗ ██╔██╗ ██║██║ ██║███████╗ ██╔══╝ ██╔══██╗██║██╔══╝ ██║╚██╗██║██║ ██║╚════██║ ██║ ██║ ██║██║███████╗██║ ╚████║██████╔╝███████║ ╚═╝ ╚═╝ ╚═╝╚═╝╚══════╝╚═╝ ╚═══╝╚═════╝...

CVE-2024-23897

CVE-2024-23897 - Jenkins Arbitrary File Read Exploit Tool Installation CVE-2024-23897 requires go 1.21 to complete installation. Execute the following command: go install github.com/wjlin0/CVE-2024-23897/cmd/CVE-2024-23897@latest Or download the pre-built binary from release macOS-arm64 macOS-amd...

CVE-2019-17662

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

CVE-2022-24934

CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...

CVE-2024-50623

CVE-2024-50623 Cleo Unrestricted file upload and download PoC CVE-2024-50623 Arbitrary File Write python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...

CVE-2023-40031

CVE-2023-40031 Análisis y reproducción de la vulnerabilidad de desbordamiento de búfer en el montón de Notepad++ CVE-2023-40031 Resumen de la vulnerabilidad Notepad++ es un conocido editor de código abierto para Windows que admite múltiples lenguajes de programación. Recientemente, investigadores...

nakivo-arbitrary-file-read-poc-CVE-2024-48248

CVE-2024-48248 NAKIVO Backup and Replication Solution: Unauthenticated Arbitrary File Read Proof of Concept See our blog post for technical details Detection in Action python3 watchtowr-vs-nakivo-arbitrary-file-read-poc-CVE-2024-48248.py --url https://192.168.1.1:4443 --file "C:\windows\win.ini"...

CVE-2024-23897

Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces an @ character...