PoC-CVE-2025-12097

CVE-2025-12097 Description NI modification of Appweb server contains a directory traversal vulnerability that allows an attacker to read arbitrary files on the server. URI path /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini will be converted to: pathInfo cchar...

CVE-2021-41773-POC

CVE-2021-41773 Vulnerability Reproduction Report Vulnerability Overview CVE ID : CVE-2021-41773 Vulnerability Name : Apache HTTP Server Path Traversal Vulnerability Risk Level : High CVSS 7.5 Affected Version : Apache HTTP Server 2.4.49 Vulnerability Description : Apache HTTP Server version 2.4.4...

CVE-2026-37070

CVE-2026-37070 Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any uploaded files by other users as long as it knows the path and filename via a specially crafted GET request to the affected endpoint...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — ml-logger streamhandler Arbitrary File Read This repository provides a standalone Python script — CVE-2025-10952.py — that exploits an unauthenticated arbitrary file read vulnerability in ml-logger's streamhandler, chained with the /glob endpoint for filesystem enumeration. When...

CVE-2024-23897

CVE-2024-23897 — HTTPS + CSRF-crumb aware PoC cve-2024-23897-crumb.py — unauthenticated arbitrary file read against Jenkins file --http --port N python3 cve-2024-23897-crumb.py jenkins.example.com python3 cve-2024-23897-crumb.py jenkins.example.com /etc/shells python3 cve-2024-23897-crumb.py...

CVE-2025-68493

CVE-2025-68493 CVE-2025-68493 7. References 1 Apache Struts XWork XML Vulnerability CVE-2025-68493 PoC and Script | ZONE.CI Global Network. https://zone.ci/secarticles/wx/486533.html 8. Vulnerability Verification and Exploitation To verify and exploit the CVE-2025-68493 vulnerability, you can use...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service An independently implemented, safety-conscious research harness and technical analysis for CVE-2019-6447 , an unauthenticated HTTP service exposed by vulnerable versions of ES File Explorer for Android. Authorized research only. Use thi...

CVE-2026-23751-poc

CVE-2026-23751-PoC Proof-of-concept implementation of the .NET HTTP Remoting technique described in Code White's NewRemotingTricks, targeting Tungsten Automation Kofax Capture. CVE-2026-23751 Title: Tungsten Automation Kofax Capture Unauthenticated File Read/Write and Command Execution via .NET...

EUVD-2026-105143

Vitest: Servers misapply server.fs.deny, serving .env, private keys, .git, and the API token file...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of...

EUVD-2026-105152

Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix...

CyBroHttpServer-v1.0.3-Directory-Traversal

CyBroHttpServer-v1.0.3-Directory-Traversal Directory Traversal in CyBroHttpServer v1.0.3 allows an attacker to read sensitive informations. CVE-2018-16133 https://vulners.com/cve/CVE-2018-16133 PoC To exploit vulnerability, someone could use 'http://host/../../../../../../../../' request to get...

CVE-2025-8081-Elementor

CVE-2025-8081 - Elementor Arbitrary File Read Vulnerability A critical arbitrary file read vulnerability in Elementor WordPress plugin that allows authenticated administrators to read any file accessible by the web server, including sensitive configuration files containing database credentials. 📋...

CVE-2026-114491

pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local path, embedding restricted file contents...

EUVD-2026-107419

pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local path, embedding restricted file contents...

djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

Affected version / file / line Version: djust v1.1.4 latest release, published 2026-09-23. File: python/djust/mcp/server.py:354-433 MCP tool findhandlersfortemplate. Confirmed identical on the commit used for triage, a7e4fafd1667b4db0b1465652d4a63cb17117a07. Description @mcp.tool def...

GHSA-R57G-MC79-8HJ2 djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool

Affected version / file / line Version: djust v1.1.4 latest release, published 2026-09-23. File: python/djust/mcp/server.py:354-433 MCP tool findhandlersfortemplate. Confirmed identical on the commit used for triage, a7e4fafd1667b4db0b1465652d4a63cb17117a07. Description @mcp.tool def...

ktor-xxe-poc

CVE-2023-45612: JetBrains Ktor XXE Proof of Concept This repository contains a vulnerable Ktor server to demonstrate the XML External Entity XXE injection vulnerability identified in CVE-2023-45612. The vulnerability exists in Ktor versions before 2.3.5 when the ContentNegotiation plugin is used...

poc-yaws-dav-xxe

XXE in Yaws web server CVE-2020-24379 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Then run: curl -i -s -k -X LOCK http://localhost:8000/ -H 'Timeout:...

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — Path Traversal in InvenTree Report Templates Advisory: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 Severity: Medium Published: 2026-03-20 Credit: @alonaki Description A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary files from t...