CVE-2024-7135

CVE-2024-7135 Tainacan = 0.21.7 - Missing Authorization to Authenticated Subscriber+ Arbitrary File Read Description The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getfile' function in all versions up to, and including,...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 is a CVSS 8.1 High Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Unauthenticated Arbitrary File Upload viasanitizefilename Bypass CVSS 8.1 High | Affected: = 1.1.3...

CVE-2025-24071

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

This repository does not have a README...

GitLab-CVE-2021-22205-

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Affected Version Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2026-113708

Argo CD versions 2.7.0 up to 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2 are vulnerable to command injection in the argocd-repo-server component. The root cause is that Kustomize passes ref or version query values from remote URLs to git fetch without an end-of-options separator. An attacker can provide...

CVE-2026-113708 Argo CD: A Kustomize remote ref can run commands in the repo-server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base, or component URLs to git fetch without an end-of-options separator. A leading-hyphen value can ...

EUVD-2026-105249

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base, or component URLs to git fetch without an end-of-options separator. A leading-hyphen value can ...

EUVD-2026-105227

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...

CVE-2026-113672

The repo-server component in Argo CD (versions 0.9.0 through 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2) is vulnerable to a path traversal and arbitrary file read issue. The underlying cause is an importer that fails to confine import, importstr, or importbin operations to the repository root when eval...

CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...

cve-2020-3452

cve-2020-3452 unauth file read in cisco asa & firepower. install git clone https://github.com/Loneyers/cve-2020-3452 && cd cve-2020-3452 && go build use ./cve-2020-3452 url.txt 40...

ChamiloLMS-CVE-2023-4220

ChamiloLMS CVE-2023-4220 Exploit Python exploit for CVE-2023-4220 , an unauthenticated arbitrary file upload vulnerability affecting Chamilo LMS = 1.11.24. The vulnerability is located in Chamilo's BigUpload component. On vulnerable installations, the upload handler allows a PHP file to be upload...

inspec-log4j

inspec-log4j This profile scans for vulnerable versions of Log4j Core JAR files directly on the file system, and embedded in WAR files. Running the profile locally git clone https://github.com/trickyearlobe/inspec-log4j inspec exec inspec-log4j Running the profile against a remote SSH target Ensu...

CVE-2026-105772 Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

Path Traversal CWE-22 in FileArtifactService in Google ADK TypeScript @google/adk versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching the artifact directory layout or write files when an agent tool invokes saveArtifact outside the intended artifact storage...

CVE-2026-105772

A Path Traversal (CWE-22) vulnerability exists in the FileArtifactService of Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 . A remote unauthenticated attacker can use crafted relative or percent-encoded path traversal sequences (e.g., ../ or ..%2F) in the userId or sessionId par...

CVE-2018-7422

CVE-2018-12613 Local file inclusion bug due to no sanitization of user input. Software Affected 1. Wordpress Plugin: Site-Editor v.1.1.1; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: 1. Wordpress URL endpoint 2. A full path file to be retrieved in remote...

cve-2025-8088

CVE-2025-8088: WinRAR Path Traversal Detection Overview This repository documents research and detection strategies for CVE-2025-8088, a path traversal vulnerability in WinRAR. Exploitation of this vulnerability can allow attackers to extract files outside the intended directory, leading to...

CVE-2025-34100-demo

CVE-2025-34100-demo Demo web server !NOTE Please note that this is just the PHP files for the website, to understand the CVE better and create a more effective PoC, visit https://nvd.nist.gov/vuln/detail/CVE-2025-34100 These files will not cause the CVE, but rather are the entry point to exploit...