CVE-2021-29447

CVE-2021-29447 POC to exploit WordPress 5.6-5.7 PHP 8+ Authenticated XXE Injection. More about this CVE here Example Example usage against HackTheBox's MetaTwo machine, which hosts a WordPress website with Media Library vulnerable to XXE Injection. python lfi.py -u manager -p partylikearockstar -...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-latest poc: /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd GET /public/plugins/icon/../../../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1 Host: 127.0.0.1:3000...

CVE-2026-54520

CVE-2026-54520 ai-agent-automation workflow file step path traversal allowed read/write outside the expected directory. Primary advisory: GHSA-cm8g-8jfq-887p Researcher credit: @chaitanyagarware At a Glance Field| Value ---|--- CVE| CVE-2026-54520 GHSA| GHSA-cm8g-8jfq-887p Project|...

CVE-2022-3328

CVE-2022-3328 CVE-2022-3328 with CVE-2022-41974 and CVE-2022-41973 from: https://www.qualys.com/2022/11/30/cve-2022-3328/advisory-snap.txt https://blog.qualys.com/vulnerabilities-threat-research/2022/11/30/race-condition-in-snap-confines-mustmkdirandopenwithperms-cve-2022-3328...

CVE-2022-0847-Container-Escape

CVE-2022-0847 CVE-2022-0847 used to achieve container escape overwrite any read-only files on host Slides in Chinese available here 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸（效果为覆写宿主机上任意只读文件） 中文汇报PPT在这里 Introduction If the kernel is vulnerable to CVE-2022-0847, the attacker can overwrite read-only files...

OSXAuditor

OS X Auditor OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and...

cve-2020-25540

ThinkAdmin Unauthorized Directory Listing/Arbitrary File Read cve-2020-25540 Usage python3 cve-2020-25540.py url...

cve-2021-41773-lab

CVE-2021-41773 — Minimal FastAPI Lab A small, self-contained FastAPI lab demonstrating how decoding user input before validating filesystem boundaries can lead to directory traversal and local file inclusion LFI, modeled after the Apache HTTP Server issues CVE-2021-41773. Features Minimal,...

CVE-2006-3392

CVE-2021-42913 Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from...

Aegis

Local AI-agent monitoring, security reviews and explicitly configured action controls. Install · Use AEGIS · Current development · Documentation · Contribute Windows beta: 0.19.2-beta, published 6 October 2026. Verify the installer · Beta readiness Current source version : 0.20.1-beta Later sourc...

CVE-2021-22205-gitlab

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC This is the Proof-of-concept exploit code for three vulnerabilities discovered by Jonas Mattsson and Hugo van den Toorn at Outpost24 Ghost Labs. These vulnerabilities are discovered in the web server component on a Pyrescom Termod4 time control machine. These vulnerabilities c...

xcavator

xcavator A network data locater using credentials obtained during penetration tests. Xcavator is a tool that scans a range of IP addresses for services that host files FTP, FTPS and SMB at the moment and for given credentials it will try to download everything it can and scan within the files for...

CVE-2020-12800

CVE-2020-12800 POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload Vulnerable plugin for testing hosted at: https://mega.nz/file/aQUClQKCZYeiTYSrPuRnwwlRavy4cqfEXs34Tkq6KQig2RcOas Pentester Academy lab...

CVE-2024-48914

This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. ============================================ | Collecting...

CVE-2024-24919

CVE-2024-24919 An Vulnerability detection and Exploitation tool for CVE-2024-24919 Installation: git clone https://github.com/RevoltSecurities/CVE-2024-24919 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / / / | |// // / / / / / / / / / / / / /...

CVE-2020-25790

CVE-2020-25790 Typesetter CMS File Upload Vulnerability Environment Pull Method docker pull mtwf/typesettercve-2020-25790:5.1 docker run -it -d -p 80:80 mtwf/typesettercve-2020-25790:5.1 /bin/bash -c "service apache2 start;/bin/bash" Typesetter account password is admin:admin Vulnerability...

CVE-2024-12209

CVE-2024-12209 Unauthenticated Local File Inclusion...

CVE-2021-45010

CVE-2021-45010 🐍 Contrived Python PoC Exploit for CVE-2021-45010. Tiny File Manager 2.4.7 Usage usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME Username -p...