fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

CVE-2021-22005

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

Onapsis_CVE-2025-31324_Scanner_Tools

Vulnerability and Indicator of Compromise IoC Scanner for CVE-2025-31324 Visual Composer Metadata Uploader Vulnerability CVE-2025-31324 is a critical CVSSv3 10 vulnerability affecting SAP NetWeaver systems, specifically within the Visual Composer Metadata Uploader component. This vulnerability...

cve-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critical Affected| = 0.211.0 RCE Fixed| 1.121.0 AFR / 1.120.4+ RCE Disclosed| 2026-01-07 11:09 UT...

File-Read-CVE-2024-9264

File-Read-CVE-2024-9264 Proof Of Concept for File Read in Grafana CVE-2024-9264 Prerequisites authenticated Grafana user with Viewer permissions or higher DuckDB binary must be installed and accessible through Grafana's PATH Impacted version Grafana = v11.0.0 all v11.x.y are impacted Usage python...

CVE-2021-38163

CVE-2021-38163 - SAP NetWeaver AS Java Desynchronization Vulnerability Description CVE-2021-38163 is a security vulnerability in SAP NetWeaver Application Server AS Java that allows an authenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution RCE...

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 A remote code execution RCE attack allow an attacker run code on a computer. The ability to execute code could lead to deploying additional malware or stealing sensitive data or even harm the server. The remote code execution was discover in Qloapps version 1.6.0.0 whil...

CVE-2023-40028

CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email for the target Ghost CMS. --password : The password for the target Ghost CMS. --url : The URL of the target Ghost CMS e.g., http://website.com. 1. Login: The script authenticates with the Ghost CMS admin API and retrieves a session...

GrafTraverse-CVE-2021-43798

GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework Command-line automation tool for authorized security testing of Grafana Directory Traversal CVE-2021-43798. Overview CVE-2021-43798 is an unauthenticated directory traversal vulnerability in Grafana 8.x that allows attackers to read...

CVE-2006-3392

CVE-2006-3392 Description Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are...

CVE-2025-4138_tarfile_filter_bypass

CVE-2025-4138 — Python tarfile filter="data" Bypass Arbitrary file write outside the extraction directory via PATHMAX symlink chain. Affected Versions Python 3.12.0 – 3.12.10 Python 3.13.0 – 3.13.3 Fixed in 3.12.11 / 3.13.4 Credit: Reporter: Caleb Brown Google How It Works Python's tarfile data...

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 PoC Exploit This repository contains a Proof of Concept PoC exploit for CVE-2024-11680, a critical vulnerability in ProjectSend r1605 and older versions. The exploit targets an improper authentication flaw due Privilege Misconfiguration issues. Features Exploits improper auth to...

CVE-2022-28113

=============== Fantec MWiD25-DS Writeup for CVE-2022-28113 by @code-byter ========================== This is a writeup of exploiting the Fantec MWiD25-DS Travel Router Firmware version: 2.000.030. This vulnerability allows any unauthorized user to execute arbitrary commands as root user. A...

CVE-2025-3568

CVE-2025-3568 Privilege Escalation via Malicious SVG File Summary A security vulnerability has been identified in Krayin CRM 2.1.0 that allows a low-privileged user to escalate privileges by tricking an admin into opening a malicious SVG file. This exploit leverages Cross-Site Request Forgery CSR...

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Nexus Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Nexus. 🔍 Key Findings Exposed Credentials in Gitea Commit History - Medium Severity Krayin CRM Unrestricted File Upload CVE-2026-38526 - High Severity...

Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-

Project Goal: To demonstrate a complete attack chain on a vulnerable WordPress installation, exploiting CVE-2021-29447 XXE in media library to achieve remote code execution and full system compromise. Phase 1: Reconnaissance & Enumeration Network Scanning with Nmap: bash Quick SYN scan to discove...

eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...

CVE-2026-54984

CVE-2026-54984 Windows ICC file parsing out-of-bounds write — remote code execution Reported through the Zero Day Initiative as ZDI-CAN-30441 , published as ZDI-26-543 , fixed by Microsoft in the August 2026 update cycle. Hi, I'm Kağan Çapar. I reported this vulnerability to the Zero Day...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List eeListSettings'AllowFrontManage' != 'YES' return;...

CVE-2020-14882

Thank you NS-Sp4ce、Jas502n、s1kr10s、demon、斯文 reference： https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and exit -u...