cve-2021-4034

cve-2021-4034...

CVE-2022-44900-demo-lab

CVE-2022-44900 Demo lab Demo webapp vulnerable to CVE-2022-44900. CVE-2022-44900 is a directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier that allow attackers to read and write arbitrary files on the local machine via...

CVE-2018-11235-PoC

PoC exploit for CVE-2018-11235 repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out '9c48e0a785dec84cb252677a8a7d55feaeac056c...

pipe-primitive

pipe-primitive An exploit primitive in linux kernel inspired by DirtyPipe CVE-2022-0847. Alcuni giorni fa, come molti esperti di sicurezza prima di me, ho studiato e riprodotto la vulnerabilità DirtyPipe CVE-2022-0847, rendendomi profondamente conto di quanto sia utile. La falla nasce da un...

CVE-2024-12905-PoC

CVE-2024-12905 tar-fs file write/overwrite vulnerability...

CVE-2026-49049

CVE-2026-49049 This repository contains a Python-based scanner and proof-of-concept for a vulnerability in the Joomla Helix3 component. The bug is an arbitrary file write issue that can lead to remote code execution RCE when an attacker is able to write a PHP payload into a web-accessible locatio...

CVE-2024-25641-Exploit-for-Cacti-1.2.26

CVE-2024-25641 Exploit for Cacti 1.2.26 Exploiting CVE-2024-25641 on Cacti 1.2.26. When a user is authenticated, an arbitrary file write vulnerability allows Remote Code Execution RCE. Overview This script automates the process of exploiting CVE-2024-25641 in Cacti 1.2.26. The vulnerability allow...

CVE-2022-22948

CVE-2022-22948 Information Disclosure in VMWare vCenter Pentera’s research group discovered a vulnerability in VMWare’s vCenter Server program affecting VMWare’s software installed in 500,000 organizations worldwide responsible to manage their most critical systems Our findings were proactively...

exch_CVE-2021-42321

exchCVE-2021-42321 This is the tool involved in the 7bits security team article "DotNet Security - CVE-2021-42321 Reproduction" Change the TypeConfuse chain to write to file, bypass Windows Defender to disable the w3wp.exe startup process. Overwrite the original ysoserial.net file with this file,...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Pending: Path Traversal in Flask-Uploads Vulnerability Information Product : Flask-Uploads Version : 0.2.1 and potentially older versions Vulnerability Type : Path Traversal Directory Traversal CWE-ID : CWE-22 Severity : HIGH CVSS 7.5 Impact : Arbitrary File Write, Remote Code...

dirtycow.cr

dirtycow CVE-2016-5195 exploit Installation Go to the release section or use your crystal environment. Usage dirtycow --target /path/to/root/file --string "string to write" --offset...

CVE-2026-73034-PoC

CVE-2026-73034 — DB-GPT v0.8.1 Unauthenticated Path Traversal → Arbitrary File Write CVSS 9.8 Critical · CWE-22 · GHSA/Issue 3104 Summary POST /api/v1/python/file/upload in DB-GPT v0.8.1 takes the user-id HTTP header and uses it raw as a path component : uploaddir = os.path.joinbasedir,...

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...

CVE-2016-3088

CVE-2016-3088 Statement A Python-based Exploit Script for CVE-2016-3088. This is my first script, so there may be something doesn't quite fit. But it seems go right when I tested. Discription This script can eliminate the need to capture packets during the penetration of CVE-2016-3088, so we can...

CVE-2025-8110

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Educational Use Exploit This repository contains a Proof of Concept PoC script in Python to demonstrate and analyze the vulnerability registered as CVE-2025-8110 in the self-hosted Git service Gogs versions 0.13.3 and earlier. ⚠️ Disclaimer !WARNING...

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

CVE-2026-75827

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-75827 CVE-2026-75827 Grav 2.0.13 - getgrav I am @abraxasnull. Loopback lab. The client is CVE-2026-75827-Abraxas-Labs.py. The denylist missed errorlog. Grav through 2.0.14 allowlists Class::method dynamic-dat...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 Fully automated exploit for CVE-2024-25641. When a user is authenticated, Cacti version 1.2.26 is vulnerable to an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import...

CVE-2021-33564

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument Injection in Dragonfly Ruby Gem. Usage Arbitrary File Read python3 poc.py -u https:///system/refinery/images -r /etc/passwd Arbitrary File Write python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:...