CVE-2026-31431.c

CVE-2026-31431.c This content is provided for educational purposes only. The author assumes no responsibility or liability for any errors or omissions in the content. All information is provided "as is" with no guarantees of completeness, accuracy, usefulness, or timeliness. Any action you take...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

ESLockDecryptor

ESLockDecryptor ESLockDecryptor is a command-line tool designed to recover and decrypt files encrypted by ES File Explorer files with the .eslock extension. It demonstrates the real-world impact of CWE-327 Use of a Broken or Risky Cryptographic Algorithm present in the ES File Explorer applicatio...

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

send

@fastify/send Send is a library for streaming files from the file system as an HTTP response supporting partial responses Ranges, conditional-GET negotiation If-Match, If-Unmodified-Since, If-None-Match, If-Modified-Since, high test coverage, and granular events which may be leveraged to take...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder = 1.7.5 - Unauthenticated Arbitrary File Download Description The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtwpgaepbdwnldpdf...

flar3ad

flar3ad is a tool that takes advantage of the CVE-2026-51031 to read files from a target server taking advantage of the /v1 endpoint of FlareSolverr's API and using driver.get function in order to exploit the vulnerability. Further explained in xinyi's blog. Installation git clone...

CVE-2023-29919

Summary: There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php Vendor: SolarView Compact Affected Product: SolarView Compact =ver 6.00 poc: http://example.com/texteditor.php Details: You can fill...

Laravel-CVE-2018-15133

Laravel-CVE-2018-15133 This Python script will allow you to create lists of sites and exploit them quickly. Prerequisites: python curl Usage: $ python cve.py Execute the script $ "Which site do you want to attack =" http:victime.com/ Add the site to the list $ chmod +x nikmok.txt gives 777...

CVE-2024-30052

This repository hosts materials related to CVE-2024-30052. More details about the vulnerability can be found in my blog post. structure builder folder contains source files for a program that crafts a dump file that exploits the vulnerability. poc folder contains three proof-of-concept files that...

AWSBucketDump

AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...

CVE-2024-27665

CVE-2024-27665 Unifiedtransform v2.X is vulnerable to Stored Cross-Site Scripting XSS via file upload feature in Syllabus module. Vendor: https://github.com/changeweb/Unifiedtransform PoC Step 1: Log in to the Application and Navigate to Academic module. Step 2: Create Session,Semester,Class,Cour...

FreePBX-Vulns-December-25

FreePBX Vulnerabilities - December 2025 This repository contains Nuclei templates for detecting three critical vulnerabilities in FreePBX: CVE-2025-61675 : Authenticated SQL Injection CVSS 8.6 - Affects endpoint module CVE-2025-61678 : Authenticated Arbitrary File Upload CVSS 8.6 - Affects endpoi...

CVE-2021-21402

CVE-2021-21402 Jellyfin Arbitrary File Read Vulnerability Overview Jellyfin is a free software media system that controls and manages media and streaming. It is an alternative to Emby and Plex, delivering media from a dedicated server to end-user devices through multiple applications. Jellyfin...

urlhunter

o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam kudos...

CVE-2026-39363

CVE-2026-39363 Vite Dev Server WebSocket Arbitrary File Read Vulnerability Vulnerability Overview Attribute| Information ---|--- CVE ID| CVE-2026-39363 GHSA ID| GHSA-p9ff-h696-f583 Vulnerability Type| Arbitrary File Read Affected Component| Vite Dev Server Affected Versions| Vite = 6.2.3...

CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC

CVE-2024-38475SonicBoomApacheURLTraversalPoC Author: abrewer251 A proof-of-concept tool for testing CVE-2024-38475 "SonicBoom" Apache URL traversal vulnerability. This script automates TLS negotiation, directory scanning, traversal verification, and payload fuzzing to identify unauthorized file...

CVE-2023-47400

CVE-2023-47400 Proof of Concept for the CVE-2023-47400 Authenticated PHP Remote Code Execution via Arbitrary file write on Nagios XI 5.11.0 !Note This poc is based on the technical advisory published by NCC group...

CVE-2024-23897

CVE-2024-23897: Jenkins Arbitrary File Read Vulnerability Leading to RCE Introduction This repository contains a Python script that exploits a critical vulnerability CVE-2024-23897 in Jenkins, leading to arbitrary file read and remote code execution RCE. This vulnerability allows an unauthenticat...

CVE-2022-0847-DirtyPipe-

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...