CVE-2022-45299

CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...

CVE-2024-23897

CVE-2024-23897 Plantilla de Nuclei para explotar CVE-2024-23897 Esta plantilla sirve como una advertencia crucial para todos los usuarios: si se detecta la vulnerabilidad de archivo local CVE-2024-23897 en su sistema, es imperativo tomar. medidas inmediatas y parchear sus sistemas sin demora. Est...

CVE-2023-24055

Descargo de responsabilidad Este script es únicamente para fines educativos y de demostración. El autor no respalda ni aprueba el uso de este script para actividades criminales o maliciosas, y solo debe usarse donde se permita explícitamente con el permiso adecuado. Este script debe usarse con...

CVE-2021-43798

CVE-2021-43798 Le versioni di Grafana 8.0.0-beta1 fino a 8.3.0 eccetto le versioni corrette sono vulnerabili a directory traversal, consentendo l'accesso a file locali. Grafana è una piattaforma open-source per il monitoraggio e l'osservabilità. Le versioni di Grafana 8.0.0-beta1 fino a 8.3.0...

GrafanaDirectoryScanner

PoC per CVE-2021-43798 Grafana è una piattaforma open source per monitoraggio e osservabilità. Le versioni di Grafana dalla 8.0.0-beta1 fino alla 8.3.0 eccetto le versioni patchate sono vulnerabili a directory traversal, consentendo l'accesso a file locali. L'URL vulnerabile è: /public/plugins//,...

CVE-2021-43798-EXPLOIT

CVE-2021-43798 - Grafana Directory Traversal 🔍 Grafana è una piattaforma open-source per il monitoraggio e l'osservabilità. Le versioni dalla 8.0.0-beta1 alla 8.3.0 eccetto le versioni patchate sono vulnerabili a un attacco di directory traversal, che consente l'accesso non autorizzato a file...

CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Strumento di exploit per la vulnerabilità di lettura arbitraria di file di Adminer 1.0 fino a 4.6.2 Installazione root@kitploit: git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Utilizzo...

CVE-2021-43798_exploit

CVE-2021-43798exploit Grafana ist eine Open-Source-Plattform für Monitoring und Observability. Die Grafana-Versionen 8.0.0-beta1 bis 8.3.0 mit Ausnahme der gepatchten Versionen sind anfällig für Directory Traversal, wodurch der Zugriff auf lokale Dateien ermöglicht wird. Der anfällige URL-Pfad...

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...

Astra Linux – Vulnerability in Firefox

The sourceMapURL feature in devtools lacked security checks, which would have prevented a webpage from attempting to include local files or other files that should be inaccessible. This vulnerability affects Firefox versions earlier than 99...

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-77074 n8n before 1.123.69 SSRF via Edit Image Node

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access...

GO-2026-4352 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2023-1709 vulnerabilities

Vulnerabilities for packages: k3d...

EUVD-2026-57695

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

GHSA-F23P-VX2J-J53R vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard, wazuh-dashboard-fips, kibana, langfuse...

Astra Linux – Vulnerability in qBittTorrent

qBittorrent versions before 5.1.2 do not prevent access to a local file that is referenced in a link URL. This issue affects rsswidget.cpp and searchjobwidget.cpp...

CVE-2026-62996

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a...