489840 matches found
CVE-2025-5880
Whistle 2.9.98 contains an unpatched path traversal vulnerability because the /cgi-bin/sessions/get-temp-file endpoint fails to adequately sanitize user input in the filename parameter. By supplying absolute paths or traversal sequences like /etc/passwd, an attacker can bypass directory...
CVE-2026-5027
This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...
postgres-basebackup-symlink
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · postgres-basebackup-symlink Write-up: https://abraxaslabs.tech/research/postgres-basebackup-symlink postgres-basebackup-symlink Class: File write Reach: Remote PostgreSQL 18.6 724edf9 - PostgreSQL Global Development...
POC_CVE-2025-69194
CVE-2025-69194: GNU Wget2 Path Traversal Vulnerability 📝 Description PoC for CVE-2025-69194 , a critical Path Traversal vulnerability in GNU Wget2 = 2.2.0 verified on v1.99.1. This vulnerability allows attackers to achieve arbitrary file write or overwrite on the victim's filesystem by providing ...
tryhackme-moniker-link
tryhackme-moniker-link Documentation of my hands-on lab Moniker Link CVE-2024-21413 completed on TryHackMe. Moniker Link CVE-2024-21413 — TryHackMe Lab Overview This repository documents my hands-on study in a TryHackMe room. The goal of this exercise was to understand how the vulnerability works...
pfsense-cp-filename-xss
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-cp-filename-xss pfsense-cp-filename-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Filename interpolates into / CSS url... on default login HTML with no encode. Portal origin i...
CVE-2024-9935
CVE-2024-9935 PDF Generator Addon for Elementor Page Builder = 1.7.5 - Unauthenticated Arbitrary File Download Usage python CVE-2024-9935.py http://example.com...
CVE-2026-49049
CVE-2026-49049 This repository contains a Python-based scanner and proof-of-concept for a vulnerability in the Joomla Helix3 component. The bug is an arbitrary file write issue that can lead to remote code execution RCE when an attacker is able to write a PHP payload into a web-accessible locatio...
CVE-2017-9798
CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found...
CVE-2026-61725
The sevenz-rust2 Rust-native 7z compressor/decompressor (prior to version 0.21.1 ) is vulnerable to a path traversal issue in src/util/decompress.rs. The decompress_impl function fails to normalize UTF-16 entry names or verify containment when computing destination paths using dest.join(entry.nam...
CVE-2026-61725 sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites
sevenz-rust2 is a Rust-native 7z compressor and decompressor. Prior to 0.21.1, extracting an attacker-supplied 7z archive can write or overwrite files outside the destination directory. In src/util/decompress.rs, decompressimpl computes each destination with dest.joinentry.name without normalizin...
CVE-2026-61725 sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites
sevenz-rust2 is a Rust-native 7z compressor and decompressor. Prior to 0.21.1, extracting an attacker-supplied 7z archive can write or overwrite files outside the destination directory. In src/util/decompress.rs, decompressimpl computes each destination with dest.joinentry.name without normalizin...
CVE-2026-81648
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-81648 Write-up: https://abraxaslabs.tech/research/CVE-2026-81648 CVE-2026-81648 CryptoPayment Gateway 1.2.2 - Granwill I am @abraxasnull. Loopback lab. The client is CVE-2026-81648-Abraxas-Labs.py. The guard...
CVE-2019-5418
CVE-2019-5418: Ruby on Rails Path Traversal & Arbitrary File Read This project is an environment for practicing and reproducing the local file inclusion vulnerability CVE-2019-5418 in Ruby on Rails. This vulnerability allows reading arbitrary files on the server through path traversal via the...
CVE-2026-5524-PoC
CVE-2026-5524 — Divi Form Builder Unauthenticated RCE Mass exploit toolkit for CVE-2026-5524 , an unauthenticated arbitrary file upload vulnerability in the WordPress plugin Divi Form Builder = 5.1.8 leading to remote code execution. Field| Value ---|--- CVE| 2026-5524 CVSS| 9.8 Critical Vector|...
CVE-2026-34990-CUPS-LPE-PoC
CVE-2026-34990 | CUPS Local Privilege Escalation PoC A generic proof-of-concept for CVE-2026-34990 , a local privilege escalation vulnerability affecting CUPS 2.4.16. The exploit demonstrates how a local unprivileged user can abuse CUPS local authentication and printer configuration behavior to...
CVE-2026-14894
CVE-2026-14894 Arbitrary File Upload Nxploited Mass Exploiter — Super Forms & Elementor Pro 🩸 Join our Telegram for the latest exclusive 0-days & weaponized CVEs 📡 Channel: https://t.me/KNxploited 👤 Nxploited | @Kxploit A high-speed, multi-threaded mass exploiter that chains two unauthenticated...
cve-2021-40444
cve-2021-40444 Reverse engineering the "A Letter Before Court 4.docx" malicious files exploting cve-2021-40444 Files including malicious word and cab-file may be downloaded on any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Note! The domain name in the original malicious...
CVE-2026-90817
CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Python 3 checker and configurable exploit hook for CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Product| REDCap Vanderbilt Affected| ≥ 13.3.0 until branch patch Fixed| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical...