492094 matches found
phpipam_1.4.4
CVE-2022-23046 phpIPAM 1.4.4 - SQL Injection phpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the subnet parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php. This project currently prints out database information and host version...
Grafana-CVE-2021-43798
Grafana-CVE-2021-43798 Grafana File-Read Affected versions: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Default plugins list alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge geomap...
CVE-2023-47464
GL-AX1800 Router Security Assessment Report Overview This report outlines the findings of a comprehensive security assessment conducted on the GL-AX1800 router manufactured by GL.iNet. The assessment aimed to identify potential vulnerabilities and weaknesses in the device's security measures...
CVE-2007-3831
CVE-2007-3831 PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at :...
CVE-2020-3452-Cisco-Python-Scanner
CVE-2020-3452 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Directory Traversal CVE-2020-3452. CVE-2020-3452 is a critical unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files on the Cisco ASA or FTD device. Overview This to...
spark-connect-archive-fragment
abraxaslabs.tech Β· github.com/abraxas Β· @abraxasnull Β· [email protected] Β· spark-connect-archive-fragment Write-up: https://abraxaslabs.tech/research/spark-connect-archive-fragment spark-connect-archive-fragment Class: File write Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software...
CVE-2025-2825
CVE-2025-2825/CVE-2025-31161 Introduction This document presents a security analysis of vulnerability CVE-2025-2825 affecting the server component of CrushFTP β a commercial solution for file transfer and storage FTP, SFTP, HTTP/S, S3-like interfaces, etc.. The defect is classified as an...
CVE-2026-29909-MRCMS-vulnerability
CVE-2026-29909: MRCMS V3.1.2 - Unauthenticated Directory Enumeration CVE ID CVE-2026-29909 Description MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input...
CVE-2019-2618
PoC POST /beawlsdeploymentinternal/DeploymentService HTTP/1.1 Host: 127.0.0.1:7001 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux i686; rv:20.0 Gecko/20100101 Firefox/20.0 Accept: text/html, image/gif, image/jpeg, /; q=.2 Connection: keep-alive username: weblogic password: weblogic wlrequesttype:...
CVE-2026-23751-poc
CVE-2026-23751-PoC Proof-of-concept implementation of the .NET HTTP Remoting technique described in Code White's NewRemotingTricks, targeting Tungsten Automation Kofax Capture. CVE-2026-23751 Title: Tungsten Automation Kofax Capture Unauthenticated File Read/Write and Command Execution via .NET...
CVE-2024-4956
CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...
CVE-2026-7020
CVE-2026-7020 Ollama arbitrary file read via tensor digest path traversal. Exfiltrates SSH host keys and any other file from a reachable Ollama host in three unauthenticated API calls. Writeup: Co-Researcher @gouldnicholas Usage python3 poc.py Tries all three SSH host key types with known sizes a...
CVE-2024-23773
CVE-2024-23773 - Arbitrary File Delete Vulnerability Information will follow in due course...
CVE-2024-50510
CVE-2024-50510 AR For Woocommerce = 6.2 - Unauthenticated Arbitrary File Upload Description The AR for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 6.2. This makes it possible for unauthenticated...
exploit-grafana-CVE-2021-43798
CVE-2021-43798 β Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...
CVE-2025-24071
CVE-2025-24071 - Windows File Explorer NTLM Hash Leak π Overview CVE-2025-24071 is a vulnerability in Windows File Explorer that allows unauthorized disclosure of NTLM hashes. When a user extracts a specially crafted .zip archive containing a malicious .library-ms file, Windows Explorer...
CVE-2026-25964
CVE-2026-25964 PoC - Tandoor Recipes Authenticated LFI Proof-of-Concept for Authenticated Local File Disclosure via Recipe Import Disclosure: Originally reported by me via GHSA-6485-jr28-52xx β οΈ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID|...
CVE-2021-3493
CVE-2021-3493 β Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...
CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below
CVE-2023-37739 - Path Traversal in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Path Traversal vulnerability. These vulnerabilities could allows remote authenticated attackers low or high privilege to navigate to locations that should not be accessible to the user.it can be...
ShredHound
ShredHound Overview Split a large BloodHound JSON file into a bunch of smaller files for faster importing. Follow me on Twitter Mike Felch - @ustayready Basic Usage usage: shred.py -h --output OUTPUT --filename FILENAME --chunks CHUNKS optional arguments: -h, --help show this help message and exi...