CVE-2024-23692

Rejetto HFS HTTP File Server CVE-2024-23692 Vulnerability Overview Rejetto HFS HTTP File Server is a simple web file server that facilitates file sharing over a network or the internet. Despite its ease of use and simplicity, a critical vulnerability CVE-2024-23692 has been discovered, making the...

CVE-2025-23942-poc

WP Load Gallery Exploit CVE-2025-23942 📌 Description Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. ⚠️ Vulnerability Details CVE ID: CVE-2025-23942...

CVE-2026-23745

CVE-2026-23745: node-tar Arbitrary File Overwrite Research: Joshua van Rijswijk Description PoC for CVE-2026-23745 , a high-severity path traversal vulnerability in node-tar 7.5.2. The library fails to sanitize absolute paths in the linkpath field for Hardlinks and Symlinks. This allows malicious...

CVE-2024-12209

CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring = 2.17.0 - Unauthenticated Local File Inclusion Description The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename'...

CVE-2026-37073

CVE-2026-37073 Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emails from the configured SMPT server on the application via making a POST request to the endpoint with needed parameters and header...

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-frameworkclass MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN and the...

CVE-2025-24054_CVE-2025-24071-PoC

CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...

CLEANSTART-2026-TL98903 In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...

Security vulnerability affects the nodetaint package. In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials...

spark-history-store-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-history-store-path Write-up: https://abraxaslabs.tech/research/spark-history-store-path spark-history-store-path Class: File write config-gated Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software...

jellyfin-suggestions-idor

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · jellyfin-suggestions-idor jellyfin-suggestions-idor Jellyfin Server 12.2 - Jellyfin Class: IDOR. Reach: Remote any authenticated non-admin. GET /Items/Suggestions is Authorize only. When userId is omitted,...

CLEANSTART-2026-JV10325 On Unix systems, opening a file in an os

CVE-2026-39822 affects multiple packages. On Unix systems, opening a file in an os. See references for individual vulnerability details...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

Crater-CVE-2023-46865-RCE

Crater-CVE-2023-46865-RCE Crater =6.0.6, CVE-2023-46865 Post-Auth RCE Superadmin Vulnerability Description Crater Invoice is vulnerable to unrestricted file upload with dangerous type due to lack of proper input validation. The Base64Mime checking class can be bypassed by embedding a valid PHP...

CVE-2020-10560

CVE-2020-10560 CVE-2020-10560 OSSN Arbitrary File Read For details on how to use this repository refer to https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read Starting docker-compose up --build Installing Once the images are running, you can access the install page at 127.0.0.1 or...

CVE-2024-36416

CVE-2024-36416 Tool for validating CVE-2024-36416 Usage pip3 install -r requirements.txt python3 sukuna.py --help python3 sukuna.py --url http://./ --validate --payload-test Server-Side Log File Check Verify the server-side file, if the log file \service\example\proxy.log is =25MB, the server is...

CVE-2020-12112

CVE-2020-12112 🚨 BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. Story 📜 During a distance learning course on a BigBlueButton instance a student in my class shared my teacher's slide presentation link and I noticed that the file name was includ...

`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

ant-releases downloads and unpacks release archives from the safenetwork / autonomi repositories. When it extracts an archive, it builds each output path by joining the archive entry's own name onto the destination directory, with no check for .. or absolute components — a classic "zip-slip" path...

CVE-2025-30208-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this article are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this article for illegal purposes or unauthorized system testing. The author assumes no...

dark-doh

dark-doh.exe public version Purpose: Download files via DoH, or download and execute a shellcode not implemented in the public version Run example: dark-doh.exe file1 download google yourdomain.com The supporting python script for DNS zone generation added py-prepzones.py. !!! Disclaimer !!! The...

CVE-2026-65400-poc

CVE-2026-65400 — macOS Screen Sharing pre-auth root file read read-only PoC Read-only proof of concept. It demonstrates the authentication bypass by reading a root-only file from a vulnerable host. It writes nothing to the target: no LaunchDaemon, no shell startup file, no crontab, no RCE chain...