CVE-2020-1938

CVE-2020-1938-tomcat-File Download + File Inclusion Tomcat-Ajp protocol file read vulnerability】 Source POC source: https://github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC/blob/master/poc.py After modification, it can include files, and under certain conditions, execute commands...

CVE-2019-5418

CVE-2019-5418 - File Content Disclosure on Rails EDIT : this CVE can lead to a Remote Code Execution, more info: https://github.com/mpgn/Rails-doubletap-RCE There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to rend...

Snaffler

Snaffler What is it for? Snaffler is a tool for pentesters and red teamers to help find delicious candy needles creds mostly, but it's flexible in a bunch of horrible boring haystacks a massive Windows/AD environment. It might also be useful for other people doing other stuff, but it is explicitl...

CVE-2015-3337

CVE-2015-3337 CVE-2015-3337 Arbitrary File Read http://10.10.20.166:9200/plugin/head/../../../../../../../../../etc/passwd Usage: python CVE-2015-3337.py python CVE-2015-3337.py / \ | | | | / | |/ | | | | || || || / | / / | | | | ' / /'| |/' || | | \ / / / / / / / / | | | | | | || / / | /| | | |...

CVE-2023-40028

CVE-2023-40028 Proof of Concept This repository contains a proof of concept POC for CVE-2023-40028, demonstrating a vulnerability in the Ghost content management system where authenticated users can upload symlinks, leading to arbitrary file read vulnerabilities. Disclaimer This POC is provided f...

CVE-2026-66493

Path Traversal in File Operations Delete / Copy / Move PhocaCommander ≤ 6.1.3 — Authenticated Admin Manipulates Files Outside Webroot SUMMARY The file action handler in PhocaCommander constructs source and destination paths from attacker-controlled base64-encoded parameters pathfrom, pathwhere...

file-unpumper

file-unpumper file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable PE files. It provides a range of features to help developers and security professionals work with PE files more effectively. Features PE Header Fixing : file-unpumper can fix and align...

parsec-cloud

.. raw:: html Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️ Cryptographic signature...

exploit-CVE-2018-15139

OpenEMR CVE-2018-15139 exploit OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2021-3129---Laravel-RCE

CVE-2021-3129---Laravel-RCE About The script has been made for exploiting the Laravel RCE CVE-2021-3129 vulnerability. This script allows you to write/execute commands on a website running Laravel , that has "APPDEBUG" set to "true" in its ".env" file...

Thruk-CVE-2023-34096

Thruk-CVE-2023-34096 Thruk Monitoring Web Interface versions = v3.06 are vulnerable to CVE-2023-34096 Path Traversal. The current exploit is made in Python 3 and exploits the vulnerability to upload a PoC file to multiple Thruk's common folders and also some Linux folders. CVSS The CNA GitHub, In...

JavaDeRe

Project Introduction Mainly used for base64-encoding class files while constructing Java deserialization echo payloads, and for decoding base64 strings back into class files to view attack payloads during incident response. PS: mainly because I'm lazy Usage Examples Run evil.java normally...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

CVE-2016-3088

CVE-2016-3088 Statement A Python-based Exploit Script for CVE-2016-3088. This is my first script, so there may be something doesn't quite fit. But it seems go right when I tested. Discription This script can eliminate the need to capture packets during the penetration of CVE-2016-3088, so we can...

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PROXY -v --usernam...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

CVE-2021-42362

CVE-2021-42362 The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the /src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 Reverse Shell Upload A slightly modified version of the Mt-Code POC which spawns a full reverse shell rather than a web shell. This exploit uses the famous PentestMonkey PHP Reverse Shell. Install pip install -r requirements.txt Example use: Create a user on the...

ktor-cve-2023-45612-poc

Ktor XXE Vulnerability Proof-of-Concept CVE-2023-45612 Summary Impact: Arbitrary files access via a crafted XML DTD with an XXE reference. Root cause: Unsafe XML document parser. This repo contains a vulnerable Ktor 2.3.4 app configured to allow external entities so the XXE effect is visible...

CVE-2026-119764 Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview

Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator downloads the file and clicks Preview Media, content-sniffed...