CVE-2022-1119

CVE-2022-1119 1.Introduction WordPress Simple File List 3.2.8 FileRead POC 2.Usage poc -f host.txt // Batch scan poc -h 192.168.1.1 // Single scan 3.Disclaimer This tool is only for learning, research, and self-assessment. It should not be used for illegal purposes. Please comply with relevant la...

CVE-2026-107052

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

CVE-2026-107052

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

EUVD-2026-113261

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

CVE-2026-107052

The ProjectMAXS MAXS Module FileRead (versionCode 27) contains a vulnerability due to insecure permissions within its AIDL interface . This flaw allows unauthorized attackers to bypass the sandbox and arbitrarily read files by providing an absolute path . While the technical impact is categorized...

CVE-2026-48503

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/isomms/server/mmsfileservice.c accepts an out-of-range initialPosition in fileOpen and stores it in the...

CVE-2026-48503 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/isomms/server/mmsfileservice.c accepts an out-of-range initialPosition in fileOpen and stores it in the...

CVE-2026-48503 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/isomms/server/mmsfileservice.c accepts an out-of-range initialPosition in fileOpen and stores it in the...

CVE-2026-48503 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/isomms/server/mmsfileservice.c accepts an out-of-range initialPosition in fileOpen and stores it in the...

CVE-2026-48503

The libIEC61850 open-source implementation (prior to version 1.6.2 ) contains a remote information disclosure vulnerability in its MMS file service . The root cause is located in src/mms/iso_mms/server/mms_file_service.c, where the fileOpen function accepts an out-of-range initialPosition and sto...

Beward IP Camera - fileread Disclosure Detection

Detects unauthenticated file disclosure via /cgi-bin/operator/fileread?READ.filePath=/etc/passwd on Beward IP cameras. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera fileread arbitrary file disclosure.""" import re from kittysploit import from lib.protocols.http.httpclient import...

Beward IP Camera - fileread File Read

Reads arbitrary files via /cgi-bin/operator/fileread?READ.filePath=. !/usr/bin/env python3 -- coding: utf-8 -- """Beward IP camera arbitrary file read via fileread.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi class...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure Detection

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. !/usr/bin/env python3 -- coding: utf-8 ...

CVE-2025-65465

A reflected Cross-Site Scripting XSS vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter e.g., to the FileRead function. This occurs because the error...

CVE-2025-65465: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter e.g., to the FileRead function. This occurs because the error...

CVE-2025-65465

A reflected Cross-Site Scripting XSS vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter e.g., to the FileRead function. This occurs because the error...

EUVD-2025-208169

A reflected Cross-Site Scripting XSS vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter e.g., to the FileRead function. This occurs because the error...

CVE-2025-65465

Skrol29 TbsZip 2.17 and earlier contain a reflected XSS in the RaiseError path, exploitable via a crafted filename parameter (e.g., against FileRead), due to improper sanitization of the error message. The issue is fixed in version 2.18. Affected software is Skrol29/tbszip; CVE-2025-65465 severit...

CVE-2019-25246 Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to read arbitrary system files via the 'READ.filePath' parameter. Attackers can exploit the fileread script or SendCGICMD API to access sensitive files like /etc/passwd and...

CVE-2019-25246 Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to read arbitrary system files via the 'READ.filePath' parameter. Attackers can exploit the fileread script or SendCGICMD API to access sensitive files like /etc/passwd and...