shakeitoff

shakeitoff Una versione più piccola, ridotta e pulita di InstallerFileTakeOver, ovvero l'exploit zero-day che è una "variante" di CVE-2021-41379 successivamente assegnato come CVE-2021-43883. Questa versione non apre una shell come InstallerFileTakeOver. Lo scopo di questo codice era creare una...

CVE-2018-16373

CVE-2018-16373 Es gibt eine Upload-Schwachstelle, über die Dateien über /admin/?/plugin/filemanager/save erstellt werden können. Weitere Details siehe: https://github.com/philippe/FrogCMS/issues/13...

CVE-2014-7911poc

CVE-2014-7911 POC para CVE-2014-7911 para Nexus5 Android 4.4.4r1 baseado no retme7 e auo, usa uma rop chain diferente Informação Uso lance este poc, clique no botão “CVE-2014-7911”, você verá um pwn.txt criado pelo usuário system em /data:...

Safer_PoC_CVE-2022-22965

SaferPoCCVE-2022-22965 Ein sichererer PoC für CVE-2022-22965 Spring4Shell Funktionalität Erstellt eine Datei namens CVE2022-22965exploited.txt im Tomcat-Verzeichnis webapps/ROOT Optionales Benutzerargument zum Ändern des Ausgabeverzeichnisses Die Exploit-Validierung erfolgt durch Anfordern der...

CVE-2026-77139

The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...

CVE-2026-77139 Path Traversal in extension "Mask" (mask)

The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...

CVE-2026-77139

CVE-2026-77139 is a path traversal vulnerability in the Mask (mask) extension for TYPO3 . The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask m...

EUVD-2026-65337

The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...

Telesquare TLR-2855KS6 - Arbitrary File Creation

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. id: CVE-2021-46418 info: name: Telesquare TLR-2855KS6 - Arbitrary File Creation author: DhiyaneshDK severity: high description: | An unauthorized file creation vulnerability in...

ManageEngine OpManager - Directory Traversal

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. id: CVE-2023-47211 info: name: ManageEngine...

CVE-2023-22809

CVE-2023-22809 CVE-2023-22809 ist eine kritische Schwachstelle, die die weit verbreitete sudo-Software betrifft, insbesondere den Befehl sudoedit. Diese Schwachstelle ermöglicht es einem Angreifer, root-Rechte auf einem Zielsystem zu erlangen, indem eine Schwachstelle im Befehl sudoedit ausgenutz...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Vulnerabilità di escalation dei privilegi in OverlayFS 🛡️ Avviso di sicurezza e guida alla mitigazione per la vulnerabilità di escalation dei privilegi del kernel Linux in OverlayFS. Panoramica CVE-2022-0944 è una vulnerabilità di sicurezza nel sottosistema OverlayFS del kernel Linu...

CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - Authentifiziert Abonnent+ Beliebige Dateierstellung Beschreibung: Das GPX Viewer-Plugin für WordPress ist anfällig für die Erstellung beliebiger Dateien aufgrund einer fehlenden Berechtigungsprüfung und Dateityp-Validierung in der Funktion gpxvfileupload in all...

Laravel-CVE-2018-15133

Laravel-CVE-2018-15133 Questo script in Python ti permette di creare liste di siti e sfruttarli rapidamente. Prerequisiti: python curl Utilizzo: $ python cve.py Esegue lo script $ "Quale sito vuoi attaccare =" http:vittima.com/ Aggiunge il sito alla lista $ chmod +x nikmok.txt concede i permessi...

log4shell-poc-lab

Log4Shell POC Demo Questo repository contiene un sottomodulo, clonalo con: root@kitploit: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Per avviare la demo, esegui: root@kitploit: docker compose up Per vedere l'exploit creare un file sul server vittima,...

tmp: path Traversal via unsanitized prefix/postfix enables directory escape

A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...

tmp: path Traversal via unsanitized prefix/postfix enables directory escape

A flaw was found in tmp, a temporary file and directory creator for Node.js. This path traversal vulnerability allows an attacker to escape the intended temporary directory. By providing specially crafted input to the prefix, postfix or dir options, an attacker can create files outside the...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - Nicht authentifizierte beliebige Dateierstellung Beschreibung: Das Debug Tool Plugin für WordPress ist anfällig für die Erstellung beliebiger Dateien aufgrund einer fehlenden Berechtigungsprüfung in der Funktion dbtpullimage und einer fehlenden Dateityp-Validieru...

CVE-2026-48753

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary command execution. Version 7.1.0 fixes the issue...

EUVD-2026-63980

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary command execution. Version 7.1.0 fixes the issue...