18 matches found
Path-Transversal-CVE-2025-31125-
Vite 漏洞利用 CVE-2025-31125 描述：利用 Vite 开发服务器 @fs 端点中的路径遍历漏洞 CVE-2025-31125，通过精心构造的 URL 访问敏感文件，如 /etc/passwd 和 /etc/hosts。 由 Harsh Gupta 创建。 用法： python viteexploit.py -u http://target.com python viteexploit.py -f urls.txt -o output.txt 要求： Python 3.x pip install requests colorama 免责声明：...
Vitejs-exploit
Vite 利用工具 CVE-2025-31125 描述：利用Vite开发服务器@fs端点的路径遍历漏洞CVE-2025-31125，通过精心构造的URL访问敏感文件，如/etc/passwd和/etc/hosts。 由Muhammad Waseem创建。 用法： python viteexploit.py -u http://target.com python viteexploit.py -f urls.txt -o output.txt 依赖： Python 3.x pip install requests colorama 免责声明：...
CVE-2025-31125
CVE-2025-31125 漏洞检测工具 这是一个用于检测 CVE-2025-31125 漏洞的 Python 脚本工具。 作者信息 Author: 大智 Date: 2025-04-01 功能特点 支持单个目标检测 支持批量目标检测 自动保存检测结果 彩色输出界面 详细的检测日志 环境要求 Python 3.6 或更高版本 Windows/Linux/MacOS 操作系统 快速开始 1. 安装依赖 root@kitploit: 一键安装所需依赖 pip install -r requirements.txt 2. 使用方法 方式一：检测单个目标 root@kitploit:...
Exploit for CVE-2025-31125
Vite Exploit CVE-2025-31125 Description: Exploits path tr...
Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125
Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-31125 DESCRIPTION: Vite is a frontend tooling...
Security Bulletin: Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation (CVE-2025-31125, CVE-2025-32395, CVE-2025-31486).
Summary Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation CVE-2025-31125, CVE-2025-32395, CVE-2025-31486. Vite is used by IBM Robotic Process Automation as part of the UI framework. This bulletin identifies the fixes required to address these vulnerabilities...
VulnCheck KEV: CVE-2025-31125
Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected...
Exploit for CVE-2025-31125
CVE-2025-31125 Exploit - Vite WASM Import Path Traversal 🛡️ T...
CVE-2025-31125 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2025-31125 vulnerabilities
Vulnerabilities for packages: vitess...
@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +41 more potentially affected by CVE-2025-31125 via vite (>=6.1.0, <=6.1.2)
vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...
@adhd/react-hooks (2.2.1), @adhd/ui-react-base-hooks (>=2.2.1, <=2.3.1) +443 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)
vite NPM version =5.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =2.0.0-beta.0, =3.0.0-beta.1 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...
@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +57 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)
vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...
@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +508 more potentially affected by CVE-2025-31125 via vite (>=4.0.0, <=4.5.9)
vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...
CVE-2025-31125
Summary of CVE-2025-31125 (Vite): Vite’s dev server, when exposed to the network (e.g., via --host or server.host), can disclose content of non-allowed files through URL modifiers like ?inline&import or ?raw?import. The issue is specific to Vite when the dev server is reachable externally; it doe...
CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. This vulnerability is fixed in 6.2.4, 6.1.3,...
CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. This vulnerability is fixed in 6.2.4, 6.1.3,...