EUVD-2023-60649

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects...

prefetch-hash-cracker

Cracker de Hash de Prefetch Motivación Durante el análisis forense de una máquina Windows, es posible que encuentres el nombre de un archivo prefetch eliminado. Aunque su contenido puede no ser recuperable, el nombre del archivo en sí suele ser suficiente para encontrar la ruta completa del...

wordlists

Wordlists Real-world infosec wordlists, updated regularly Current Wordlists Technologies These wordlists are based on the source code of the CMSes/servers/frameworks listed here. The current wordlists include: Wordpress Joomla Drupal Magento Ghost Tomcat There are 2 versions of each wordlist: Bas...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

Reg1c1de

Reg1c1de: Windows Registry Privesc Scanner Summary from help output: Reg1c1de is a tool that scans specified registry hives and reports on any keys where the user has write permissions In addition, if any registry values are found that contain file paths with certain file extensions and they are...

CVE-2024-34102

CVE-2024-34102 Usage root@kitploit: python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...

CVE-2017-1000028

CVE-2017-1000028 POC&EXP for GlassFish4.1.1not including 4.1.1. Param: -u:For single url but without outputing the /etc/passwd. -ut:For single url but with outputing the /etc/passwd. -f:Read url from the url.txt and prove it if the url is vulnerable. -c:This must be used with the parameter...

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: Vulnerabilidad de Lectura Arbitraria de Archivos Este código te ayudará a entender la combinación de solicitud y respuesta del ataque. Usa una herramienta proxy para ver el resultado. python3 CVE-2024-23897.py -u $url -p $filepathtoread...

CVE-2023-4636

CVE-2023-4636 La vulnerabilidad en limelight es un problema de ejecución remota de código RCE no autenticado que surge de controles insuficientes en las rutas de archivos durante el procesamiento de imágenes mediante Imagick. Permite a los adversarios proporcionar archivos a través de FTP, lo que...

CVE-2026-80494 Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Download

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containin...

CVE-2026-80494

The Yogeta WP Cloud WordPress plugin (through version 1.0) contains an unauthenticated arbitrary file download vulnerability. A public endpoint fails to validate a user-supplied file path before passing it to a file-read function, and the endpoint requires no authorization. This allows any unauth...

EUVD-2026-76782

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containin...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2026-26832

CVE-2026-26832: Inyección de comandos del sistema operativo en node-tesseract-ocr Resumen node-tesseract-ocr hasta la versión 2.2.1 permite la inyección de comandos del sistema operativo en recognize en src/index.js. El paquete construye una cadena de comando de shell y la ejecuta con...

CVE-2025-65321

CVE-2025-65321 El bot de Discord Language Sloth es vulnerable a Directory Traversal en las funciones gif y png. Las funciones construyen rutas de archivo utilizando entrada de usuario sin saneamiento para el parámetro 'name', lo que permite a los atacantes hacer referencia a archivos fuera de los...

CVE-2026-26831

CVE-2026-26831: Inyección de comandos del sistema operativo en textract Resumen textract hasta la versión 2.5.0 permite la inyección de comandos del sistema operativo a través de la ruta de archivo proporcionada a varios extractores. Varias rutas de código pasan esa ruta de archivo a...

CVE-2026-39813

🛡️ CVE-2026-39813 - Vulnerabilidad de Path Traversal en Fortinet FortiSandbox 📌 Descripción General CVE-2026-39813 es una vulnerabilidad crítica de path traversal que afecta a Fortinet FortiSandbox. La vulnerabilidad se debe a una validación incorrecta de las rutas de archivo proporcionadas por el...

CVE-2026-79692

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access...

CVE-2026-79692

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access...

EUVD-2026-74851

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access...