CVE-2020-13158

CVE-2020-13158 - Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000 active...

CVE-2024-0044_PoC

This repository does not have a README...

CVE-2023-51385POC

This repository does not have a README...

CVE-2022-26923

CVE-2022-26923 Description This vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services AD CS server role installed. It is mainly related to the Active Directory Certificate...

CVE-2024-25466

CVE-2024-25466 Description for CVE-2024-25466 Suggested description Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component. Vulnerability Type...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...

CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC Repository: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Description This repository contains a Python exploit for CVE-2019-16278 , a vulnerability in Nostromo 1.9.6 a web server. The vulnerability allows for Remote Code Execution RCE by exploiting...

cve-2019-1422

cve-2019-1422 A worthless vulnerability, garbage. Retest manually deleting teredo.txt or iphttps.txt under the c:\windows\temp directory...

grafana-exploit-CVE-2021-43798

grafana-exploit-CVE-2021-43798 About What is this exploit used for ? used for the Grafana Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798 allows access to local files using directory traversal What grafana versions will this exploit work for? will work for Grafana versions 8.0.0-bet...

CVE-2021-21234

CVE-2021-21234 CVE-2021-21234 Spring Boot Directory Traversal spring-boot-actuator-logview adds a simple log file viewer as a spring boot actuator endpoint in a library. It is the maven package "eu.hinsch:spring-boot-actuator-logview". A directory traversal vulnerability exists in...

cve-2017-7374

cve-2017-7374 To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory...

CVE-2019-17662

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

cve-2019-19781

CVE-2019-19781 Questo è stato caricato solo perché altri ricercatori hanno pubblicato il loro codice per primi. Avremmo sperato di tenerlo nascosto ancora per un po', dando ai difensori il tempo adeguato per applicare le patch ai loro sistemi. Siamo tutti per la divulgazione responsabile, ma in...

CVE-2019-19781

This article is about CVE-2019-19781, a Remote Code Execution RCE vulnerability due to Directory Traversal in Citrix ADC and Gateway. This remote code execution vulnerability occurs because the validation of the smb.conf file under the /vpn path's ../vpns is not properly performed. Steals system...

CVE-2025-65345

CVE-2025-65345 – Authenticated Path Traversal From Zip Function Leading to Filesystem Disclosure in laravel-file-manager v3.3.1 🧭 Overview An authenticated Directory Traversal vulnerability in laravel-file-manager v3.3.1 and below allows attackers with access to the file manager interface to use...

CVE-2026-44035 Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service

Uncontrolled recursion in DcmDicomDir::moveRecordToTree in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset o...

CVE-2025-13390

WP Directory Kit = 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover Summary The WP Directory Kit plugin for Wordpress version 1.4.4 and below contains an authentication bypass in its auto-login functionality. The vulnerability allows unauthenticated attackers to gain...

Tarmageddon-CVE-2025-62518-

Tarmageddon CVE-2025-62518 Video: https://youtu.be/EYBB4BHsp9E Repo directories vulnerable-extract minimal repoducible example, takes a path as arg, and extracts that file to ./output malicious-payload creates a simple malicious.tar archive with some example of smuggled content, comments explain...

EUVD-2026-94934

Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site UploaderHelper . The showImage action resolves a request-controlled path, calls that helper, and then returns the image. If image decoding is...

CVE-2022-33679_Checker

CVE-2022-33679 Checker Lightweight checker that tests whether a set of Active Directory credentials is exposed to CVE-2022-33679 Kerberos AS-REP roast without pre-authentication. The code is derived from Bdenneu/CVE-2022-33679 and keeps only the detection path—it never attempts exploitation. It...