CVE-2024-27460

CVE-2024-27460 HP Plantronics Hub 3.25.1 Updater Privilege Escalation/Arbitrary File Read Description: HP Plantronics Hub 3.25.1 suffers from a bug that allows low privileged users to perform arbitrary file read as SYSTEM on the machine where the application is installed. Moreover, it is possible...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Unauthenticated Arbitrary File Creation Description: The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbtpullimage function and missing file type validation in all versions up to, and including,...

CVE-2025-25279-Mattermost-Path-Traversal

🔥 CVE-2025-25279 — Mattermost 10.4.1 📤 Path Traversal in Focalboard allowing file exfiltration 🌟 Presentation This proof of concept demonstrates the exploitation of vulnerability CVE-2025-25279 affecting Mattermost 10.4.1. A flaw in Focalboard the board management module allows arbitrary file...

cve-2019-6715

cve-2019-6715 Shout out to TomNomNom for 99.9% of his code.... Build go get github.com/fatih/color go build Usage cat list.txt | ./2019-6715 All vuln urls are logged in text.log CVE 2019-6715 Description: pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers ...

CVE-2024-24919

CVE-2024-24919 This project aims to create an automation to better study CVE-2024-24919. api.py : Collects possible vulnerable IPs. CVE-2024-24919.py : Performs brute force given the IP file and the directories file. worldListLFI.txt : List of Linux directories. Usage Clone this repository on you...

openmeetings-backup-config-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · openmeetings-backup-config-path Write-up: https://abraxaslabs.tech/research/openmeetings-9-1-0-leftovers openmeetings-backup-config-path Class: File write leftover Reach: Remote Apache OpenMeetings 9.1.0 9773c59e -...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...

CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Description This exploit demonstrates an Unrestricted file upload vulnerability in Chamilo-LMS. The vulnerability affects the big file upload functionality located at: /main/inc/lib/javascript/bigupload/inc/bigUpload.php Affected Versions : Chamilo LMS = v1.11.24...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

CVE-2022-20818

CVE-2022-20818: Local Privilege Escalation via Partial File Read in Cisco SD-WAN The “config - load” feature from Viptela SSH shell uses “wget” to fetch remote “command” files over FTP. By hosting a malicious FTP server and replacing the local files created by wget with symlinks, an attacker can...

CVE-2018-1263-Demo

Exploit Demo This guide will help you to install vulnerable component and perform the attack related to phpMyAdmin bug mentioned in CVE-2018-1263. Description of CVE Why does the vulnerability exist How does the attack work How to install vulnerable component How to perform the attack Description...

CVE-2009-2265

cf8-upload.py ⭐ a python3 script to exploit CVE-2009-2265. the exploit - CVE-2009-2265 ❗ the script exploits a vulnerability found in FCKeditor 2.6.4.1 which was implemented into adobe coldfusion 8.0.1: https://vulners.com/cve/CVE-2009-2265 the script allows the user to submit a file to upload to...

CVE-2022-22965-PoC_Payara

CVE-2022-22965 PoC - Payara Arbitrary File Download Minimal example of how to reproduce CVE-2022-22965 Spring vulnerability in Payara/Glassfish. Alternative payload for Payara/Glassfish that allows the malicious user to set an arbitrary web root, leading to arbitrary file download. Run using dock...

Sicurezza-Informatica-Presentazione

What does this repository contain? This repository contains a brief research and presentation of the security flaw regarding XZ Utils for the UNIPR cybersecurity course CVE-2024-3094 Description of the flaw by Ubuntu: Malicious code was discovered in the upstream tarballs of xz, starting with...

CVE-2006-3592

CVE-2006-3952 Exploit for Easy File Sharing FTP Server 3.5 on Win7 32 Based on: pwntools msfvenom / reversetcp payload Vulnerable app available at https://www.exploit-db.com/apps/0efddb6d04f4125d7c1f104c6b1c60a0-efsfs.exe Simple SEH overrite + couple jumps back, due to stack being corrupted after...

sap_igs_xxe

SAP IGS XXE attack CVE-2018-2392 and CVE-2018-2393 This module in Metasploit Framework Documentation1 Module2 Vulnerable Application This module exploits CVE-2018-2392 and CVE-2018-2393, two XXE vulnerabilities within the XMLCHART page of SAP Internet Graphics Servers IGS running versions 7.20,...

CVE-2017-1000028

CVE-2017-1000028 POC&EXP for GlassFish4.1.1not including 4.1.1. Param: -u:For single url but without outputing the /etc/passwd. -ut:For single url but with outputing the /etc/passwd. -f:Read url from the url.txt and prove it if the url is vulnerable. -c:This must be used with the parameter...

[SECURITY] [DLA 4872-1] python-git security update

Debian LTS Advisory DLA-4872-1 [email protected] https://www.debian.org/lts/security/ Emmanuel Arias October 31, 2026 https://wiki.debian.org/LTS Package : python-git Version : 3.1.30-1+deb12u3 CVE ID : CVE-2026-42215 CVE-2026-42284 CVE-2026-44243 CVE-2026-44244 CVE-2026-67322...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC This repository contains a benign proof of concept for CVE-2026-36227, a path traversal issue in Easy Chat Server 3.1 user registration handling. This repository is for authorized security research and local reproduction only. Do no...

CVE-2025-0411-PoC

更多PoCs at: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Compile with MinGW-w64 x8664-w64-mingw32-g++ loader.cpp -o loader.exe -s -static After compilation, compress the exe with 7z and execute twice. Since this vulnerability requires user interaction, the generated compressed file needs...