CVE-2026-86834 MetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms Integration

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

nmap-CVE-2023-23333-exploit

nmap-CVE-2023-23333-exploit Nmap NSE-скрипт для извлечения /etc/passwd с удаленной системы с использованием уязвимости Solarwinds CVE-2023-23333 Сохраните скрипт в файл с именем solar-CVE-2023-23333.nse. Для запуска скрипта используйте опцию --script-args Nmap, указав путь к выходному файлу: nmap...

CVE-2021-27328

Path Traversal on Yeastar TG400 GSM Gateway - 91.3.0.3 This is a Proof of Concept for CVE-2021-27328 Example to get firmware decrypting password http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../bin/firmwaredetect to get /etc/paswd...

CVE-2023-34598

Gibbon v25.0.0 - Локальное включение файлов - CVE-2023-34598 Gibbon v25.0.0 подвержен уязвимости локального включения файлов Local File Inclusion, LFI, которая позволяет включить содержимое нескольких файлов, находящихся в папке установки, в ответ сервера. Доказательство концепции Для эксплуатаци...

CVE-2006-2842

Badges Licence MIT Installation Installer cve-2006-2842 avec npm npm install cve-2006-2842 -g Utilisation Exemple pour une seule URL cve-2006-2842 -u http://example.com Utilisation Exemple pour une liste d'URLs cve-2006-2842 -l urls.txt -o out.txt Captures d'écran Menu d'aide Obtenir tous les...

CVE-2024-4956

CVE-2024-4956 - Traversée de chemin non authentifiée dans Nexus Repository Manager 3 Le Nexus Repository Manager est un gestionnaire de dépôts qui organise, stocke et distribue les artefacts nécessaires au développement. Une vulnérabilité de traversée de chemin a été découverte dans Nexus...

CVE-2021-29447

Ordre d'installation et d'exécution 0. Exécution de Docker $docker-compose up 1. Exécution de wordpress.sh Avant d'installer WordPress, configurez le fichier wp-config.php. $docker exec -it -u root wordpress /bin/bash -c "/usr/local/bin/wordpress.sh" 2. Installation de WordPress Accédez au site...

CVE-2021-41773-PoC

CVE-2021-41773-PoC PoC pour CVE-2021-41773 avec docker pour démonstration Exécution Exécutez simplement ./poc.sh. Assurez-vous d'avoir docker et docker-compose fonctionnels. $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...

Discourse Backup File Disclosure Via Default Nginx Configuration

Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use FileStore--LocalStore which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick...

Gotenberg < 8.34.0 - Local File Disclosure

Gotenberg before 8.34.0 allows SSRF and limited local file disclosure via its /forms/libreoffice/convert endpoint. When LibreOffice is used to convert user-uploaded DOCX files, external relationships within the document such as a:blip r:link TargetMode="External" can instruct LibreOffice to fetch...

ECOA Building Automation System - Arbitrary File Retrieval

The ECOA BAS controller suffers from an arbitrary file disclosure vulnerability. Using the 'fname' POST parameter in viewlog.jsp, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information. id: CVE-2021-41293 info: name: ECOA Building Automation...

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

Cellinx NVT Web Server - Local File Disclosure

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. id: CVE-2023-23063 info: name: Cellinx NVT Web Server - Local File Disclosure author: daffainfo severity: high description: | Cellinx NVT v1.0.6.002b was discover...

Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversal

Carel pCOWeb HVAC BACnet Gateway 2.1.0 contains an unauthenticated arbitrary file disclosure caused by improper verification of the 'file' GET parameter in logdownload.cgi, letting attackers disclose sensitive files via directory traversal, exploit requires no authentication. id: CVE-2022-37122...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN чтение файлов до аутентификации Ссылки 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

Linux Distros Unpatched Vulnerability : CVE-2026-102991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.gettemplate in mako/lookup.py resolves template URIs with posixpath,...

CVE-2020-25068

CVE-2020-25068 Python exploit for Conacwin v3.7.1.2. Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal...

CVE-2018-20463

CVE-2018-20463 WordPress JSmol2WP Plugin 1.07版本中存在安全漏洞。攻击者可利用该漏洞读取任意文件。 Arguments optionnels: -h, --help afficher ce message d'aide et quitter -u url, --url url URL cible ex:"http://127.0.0.1" -f file, --file file Cibles dans le fichier ex:"ip.txt" Utilisation python3 CVE-2018-20463.py -u...