Lucene search
+L

6667 matches found

Kitploit
Kitploit
added 2026/08/27 2:40 p.m.2 views

CVE-2020-5398

CVE-2020-5398 - Ataque RFD Reflected File Download para Spring MVC No Spring Framework, versões 5.2.x anteriores a 5.2.3, versões 5.1.x anteriores a 5.1.13 e versões 5.0.x anteriores a 5.0.16, um aplicativo está vulnerável a um ataque de download de arquivo refletido RFD quando define um cabeçalh...

8CVSS7.6AI score0.88402EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 1:51 p.m.2 views

AWSBucketDump

AWSBucketDump AWSBucketDump एक उपकरण है जो लूट की तलाश में AWS S3 बकेट्स की शीघ्रता से गणना करता है। यह एक सबडोमेन ब्रूटफ़ोर्सर के समान है, लेकिन विशेष रूप से S3 बकेट्स के लिए बनाया गया है और इसमें कुछ अतिरिक्त सुविधाएँ भी हैं जो आपको स्वादिष्ट फ़ाइलों को grep करने के साथ-साथ दिलचस्प फ़ाइलों को...

5.5AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/08/27 12:47 p.m.2 views

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon für Elementor Page Builder = 1.7.5 - Nicht authentifizierter beliebiger Datei-Download Beschreibung Das PDF Generator Addon für Elementor Page Builder Plugin für WordPress ist anfällig für Path Traversal in allen Versionen bis einschließlich 1.7.5 über die Funkti...

7.5CVSS8.7AI score0.0749EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 7:00 a.m.3 views

CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivo Não Autenticado Visão Geral O plugin PDF Generator Addon for Elementor Page Builder para WordPress é vulnerável a Path Traversal em todas as versões até, e incluindo, 1.7.5 por meio da função...

7.5CVSS8.7AI score0.0749EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/27 6:54 a.m.1 views

CVE-2024-55457-PoC

CVE-2024-55457-PoC O MasterSAM Star Gate v11 é vulnerável a um ataque de travessia de diretório por meio do endpoint /adama/adama/downloadService. Um atacante pode explorar essa vulnerabilidade manipulando o parâmetro file para acessar arquivos arbitrários no servidor, potencialmente levando à...

6.5CVSS8.8AI score0.03059EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 4:44 a.m.2 views

CVE-2024-46987

CVE-2024-46987: Path Traversal Automatizado 📖 Visão Geral Este repositório contém uma Prova de Conceito PoC baseada em Python para a CVE-2024-46987. Esta vulnerabilidade é uma falha de Path Traversal encontrada em módulos de download de arquivos de determinados ambientes CMS notavelmente o Camale...

7.7CVSS5.2AI score0.1456EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/27 4:33 a.m.1 views

CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat-

Avis de sécurité : des contrôles d'accès insuffisants permettent le téléchargement non autorisé de fichiers Let's Chat ID CVE attribué : CVE-2026-66750 Résumé GET /files/:id/:name vérifie que l'appelant est connecté puis sert le fichier. Il ne vérifie jamais si l'appelant est autorisé à voir le...

5.3CVSS5.3AI score0.00263EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.62 views

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

7.5CVSS9AI score0.04235EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.66 views

WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download

Themewinter Eventin contains a path traversal caused by relative path manipulation, letting attackers access arbitrary files on the server, exploit requires no specific privileges or user interaction. id: CVE-2025-47445 info: name: WordPress Eventin Themewinter ≤ 4.0.26 - Arbitrary File Download...

9.8CVSS8.9AI score0.05145EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.78 views

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

7.5CVSS7.8AI score0.11733EPSS
SaveExploits3References4
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.56 views

Sante PACS Server.exe - Path Traversal Information Disclosure

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed. id: CVE-2025-2264 info: name: Sante PACS Server.exe - Path Traversal...

7.5CVSS9AI score0.34548EPSS
SaveExploits2References1
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.32 views

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

8.7CVSS8.8AI score0.01452EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.624 views

WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF

WordPress Automatic plugin 3.92.1 is vulnerable to unauthenticated Arbitrary File Download and SSRF Located in the downloader.php file, could permit attackers to download any file from a site. Sensitive data, including login credentials and backup files, could fall into the wrong hands. This...

9.9CVSS8.8AI score0.93971EPSS
SaveExploits18References3
Kitploit
Kitploit
added 2026/08/27 4:20 a.m.2 views

CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 - DOWNLOAD ARBITRÁRIO DE ARQUIVOS Coletando bancos de dados em massa com o plugin: COMJOOMANAGER, do CMS: Joomla, projeto desenvolvido em python 2.x, mais informações, acesse o vídeo do youtube. CVE: 2017-18345 Risco : Alto Risco de Segurança 0day.Today-ID: 29950 ExploitDB-id:...

9.8CVSS8.9AI score0.02966EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 4:17 a.m.2 views

RP_Import_RCE

Real Player 'external::Import' download arbitrário de arquivos, vulnerabilidades de travessia de diretório levam à execução remota de código Vídeo de demonstração: https://youtu.be/CONlijEgDLc O Real Player usa a funcionalidade do Microsoft Internet Explorer e expõe propriedades e métodos por mei...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 4:12 a.m.111 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/27 4:09 a.m.2 views

wordpress-exploits

wordpress-exploits Exploits aleatórios do WordPress podem ou não funcionar. CVE-2019-19985 Informações root@kitploit: Description: Unauthenticated File Download w/ Information Disclosure CVE ID: CVE-2019-19985 CVSS v3.0 Score: 5.8 Medium CVSS Vector String:...

5.8CVSS5.7AI score0.71399EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/27 3:33 a.m.2 views

sharingIsCaring

sharingIsCaring TwonkyMedia Server Comprometido CVE-2018-7171 Informações de contexto Este é um repositório GitHub que contém todas as informações relevantes sobre CVE-2018-7171. e mais CVE-2018-7171 representa uma vulnerabilidade de travessia de diretório/arquivo no TwonkyMedia Server versão...

7.5CVSS7.6AI score0.28419EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/27 3:13 a.m.2 views

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon para Elementor Page Builder = 1.7.5 - Download Arbitrário de Arquivos Não Autenticado Uso python CVE-2024-9935.py http://example.com...

7.5CVSS8.7AI score0.0749EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 2:35 a.m.81 views

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...

5.7AI score
SaveExploits0
Rows per page
Query Builder