CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

EUVD-2026-92474

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later , the GET /api/scm/resolve and POST /api/factory/resolver endpoints are vulnerable to Server-Side Request Forgery (SSRF) . The application passes attacker-controlled URLs to URLFetcher.fetch() without an allow-list for schemes or hosts. Consequently, an au...

CVE-2026-45504

CVE-2026-45504 Lectura de archivos de Exchange CVE-2026-45504 Exchange File Read Blog de investigación python3 CVE-2026-45504.py --attacker-ip 192.168.2.238 --attacker-port 9020 --creds [email protected] --password Hawktrace1 --target https://mail.exchange.local --target-file...

CVE-2026-63267

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...

EUVD-2026-92418

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

mpDNS

mpDNS también conocido como servidor DNS multipropósito Servidor DNS simple, configurable con múltiples características útiles Python 3 names.db - contiene todos los registros personalizados ver ejemplos Comodines simples como .example.com Captura solicitudes DNS unicode Acciones personalizadas...

cve-2020-5902

cve-2020-5902 cve-2020-5902 POC exploit POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specify the loca...

CVE-2016-10956-mail-masta

Mail Masta - Local File Read CVE-2016-10956 The mail-masta plugin 1.0 for WordPress has local file read in countofsend.php and csvexport.php. Usage $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETURL -f FILE | -F...

CVE-2025-66516-POC

⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educational/Authorized Testing Only | License | Security Policy About This POC This repository contains a proof-of-concept POC exploit for CVE-2025-66516 , an XML External Entity XXE injection vulnerability in Apache Tika versions prior to 3.2.2. The vulnerability...

Vitest Browser Mode - Local File Read

Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host- true, an attacker can send a request to that handler from remote to get th...

CVE-2020-1938

CVE-2020-1938 CVE-2020-1938 fixes errors in the PoC from https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat.git and has been verified to work on Apache Tomcat/8.0.43. Practice Steps 1. Create docker-compose.yml 2. docker compose up -d 3. python3 CVE-2020-1938.py -p 8009 ...

CVE-2022-46364-poc

CVE-2022-46364 — Apache CXF XOP:Include SSRF / LFI Autor: 0xmid00 Vulnerabilidad: SSRF / Lectura de archivos local via XOP:Include en solicitudes MTOM Afectado: Apache CXF 3.5.5 y 3.4.10 ¿Cuál es la vulnerabilidad? Apache CXF procesa mensajes MTOM Mecanismo de Optimización de Transmisión de...

CVE-2024-40422

CVE-2024-40422 Encontré esto en exploit-db, decidí hacer el mío propio para practicar. Este exploit buscará el archivo passwd e imprimirá su contenido en un sistema vulnerable. Este script explota una vulnerabilidad de path traversal en Devika v1. Créditos a Alperen Ergel por encontrar la...

CVE-2019-8389

CVE-2019-8389 - Arbitrary file read in Musicloud for iOS v1.6 CVE-2019-8389 An exploit code for exploiting a local file read vulnerability in Musicloud v1.6 iOS Application Description: A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the...

CVE-2020-5902

CVE-2020-5902 Script de Python para explotar F5 Big-IP CVE-2020-5902 Ejemplos Explotación de lectura de archivo local: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Explotación RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2019-5418

CVE-2019-5418 Test case Run : $ rails s PoC : Accept: ../../../../../../../../etc/passwd Req 1 - GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0 Accept: diyarbakirguzelbaglardelalelorke ------ CATCH Content-Lengt...

CVE-2022-44268

CVE-2022-44268 Este repositorio contiene una Prueba de Concepto POC para una vulnerabilidad en ImageMagick v. 7.1.0-49, una biblioteca de manipulación de imágenes de código abierto ampliamente utilizada. La vulnerabilidad permite a un atacante incrustar el contenido de un archivo arbitrario en un...

CVE-2024-28752

Apache CXF CVE-2024-28752 Entorno de reproducción Anuncio de vulnerabilidad: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt Inicio del entorno samples/javafirstjaxwsfactorybean IDEA Inicie el servicio webservice a través de ServerStarter.java Compilación Usar JDK8 mvn clean...