1183 matches found
CVE-2022-45299
CVE-2022-45299 Biblioteca afectada : webbrowser.rs antes de la versión 0.8.3 https://github.com/amodm/webbrowser-rs Resumen: La biblioteca no valida que la entrada proporcionada sea realmente una URL. Por lo tanto, un atacante que controle una URL sin filtrar pasada a webbrowser::openURL puede...
GrafanaDirectoryScanner
PoC para CVE-2021-43798 Grafana es una plataforma de código abierto para monitoreo y observabilidad. Las versiones de Grafana desde 8.0.0-beta1 hasta 8.3.0 excepto las versiones parcheadas son vulnerables a ldirectory traversal, permitiendo el acceso a archivos locales. La URL vulnerable es:...
CVE-2024-23897
CVE-2024-23897 Nuclei Template For Exploit CVE-2024-23897 This template serves as a crucial warning to all users if the CVE-2024-23897 local file vulnerability is detected within your system, it is imperative to take. immediate action and patch your systems without delay. This vulnerability poses...
CVE-2021-43798
CVE-2021-43798 Grafana versiones 8.0.0-beta1 hasta 8.3.0 excepto versiones parcheadas es vulnerable a salto de directorio, permitiendo el acceso a archivos locales. Grafana es una plataforma de código abierto para monitoreo y observabilidad. Grafana versiones 8.0.0-beta1 hasta 8.3.0 excepto...
CVE-2023-24055
Descargo de responsabilidad Este script es únicamente para fines educativos y de demostración. El autor no respalda ni aprueba el uso de este script para actividades criminales o maliciosas, y solo debe usarse donde se permita explícitamente con el permiso adecuado. Este script debe usarse con...
CVE-2021-43008-AdminerRead
CVE-2021-43008 - AdminerRead Herramienta de explotación para la vulnerabilidad de lectura arbitraria de archivos en Adminer 1.0 hasta 4.6.2 Instalación root@kitploit: git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Uso...
WebKitGTK-DND-Fix
WebKitGTK-DND-Fix Research and CI notebook for restoring trusted file drag-and-drop on WebKitGTK and WPE after CVE-2025-13947. The issue CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg let web content read local file contents through drag-and-drop on WebKitGTK. The upstream fix, bugs.webkit.org...
CVE-2021-43798_exploit
CVE-2021-43798exploit Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions is vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: /public/plugins//, where is the plugi...
CVE-2021-43798-EXPLOIT
CVE-2021-43798 - Recorrido de Directorios en Grafana 🔍 Grafana es una plataforma de código abierto para monitoreo y observabilidad. Las versiones 8.0.0-beta1 hasta 8.3.0 excepto las versiones parcheadas son vulnerables a un ataque de recorrido de directorios, lo que permite el acceso no autorizad...
CVE-2026-63435
Mail is an internet library for Ruby designed to handle email generati...
SUSE CVE-2024-29180
Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the...
CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules
GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...
CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules
GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...
CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access
RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...
Astra Linux – Vulnerability in libxml-security-java
All versions of Apache Santuario – XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to a issue where the “secureValidation” property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to exploit an XPath Transform to extract any...
Astra Linux – Vulnerability in Firefox
The sourceMapURL feature in devtools lacked security checks, which would have prevented a webpage from attempting to include local files or other files that should be inaccessible. This vulnerability affects Firefox versions earlier than 99...
CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB
Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...
CVE-2026-77074 n8n before 1.123.69 SSRF via Edit Image Node
n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access...
