Flowise - Path Traversal

Flowise = 2.2.8 contains a path traversal vulnerability caused by missing validation of chatflowId and chatId parameters in file handling, letting unauthenticated attackers read and write arbitrary files, exploit requires no authentication. id: CVE-2025-71334 info: name: Flowise - Path Traversal...

Ruby On Rails - Local File Inclusion

Ruby On Rails is vulnerable to local file inclusion caused by secondary decoding in Sprockets 3.7.1 and lower versions. An attacker can use %252e%252e/ to access the root directory and read or execute any file on the target server. id: CVE-2018-3760 info: name: Ruby On Rails - Local File Inclusio...

Mlflow < 2.17.0 - Local File Inclusion

Mlflow before 2.17.0 is susceptible to local file inclusion due to path traversal in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2024-8859...

ACME mini_httpd <1.30 - Local File Inclusion

ACME minihttpd before 1.30 is vulnerable to local file inclusion. id: CVE-2018-18778 info: name: ACME minihttpd 1.30 - Local File Inclusion author: DhiyaneshDK,dogasantos severity: medium description: ACME minihttpd before 1.30 is vulnerable to local file inclusion. impact: | Successful...

CVE-2020-5902

CVE-2020-5902 Python script to exploit F5 Big-IP CVE-2020-5902 Examples Exploit local file read: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploit RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

explain-my-curl

explain-my-curl explain-my-curl is a local-first CLI for understanding what a curl command is doing across DNS, TLS, and HTTP. This repository currently includes: A CLI command to parse and explain a curl input A starter TUI for interactive exploration Execution telemetry for DNS, TCP connect, TL...

CVE-2020-0796-SMB

CVE-2020-0796-SMB This resource is a reproduction of the CVE-2020-0796 vulnerability, including Python and C++ versions. It mainly aggregates resources from GitHub masters, hope you like it C++ Python EXP POC Vulnerability Exploitation: Local EXP Privilege...

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance like TeamViewer C++ version https://dydtjr1128.github.io/RemoteAssistance-Cpp/ It also made java swing version = Link This version is only implemented up to local mirroring, which has not yet used network. ToDo - x Screen capture - x Double buffering - Add...

Metabase_CVE-2021-41277

MetabaseCVE-2021-41277 Description Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map admin-settings-maps-custom maps-add a map support and potential local file inclusion including environment variables. URLs...

gitlab-12.9.0-file-read

The warn For demonstration purpose and ethical hacking only. The what A wanted to be better script than what can be found on exploit-db about the authenticated arbitrary read file on GitLab v12.9.0 CVE-2020-10977 The how 1. Meet the dependency you probably already have the rest pip3 install...

CVE-2020-0796-LPE

CVE-2020-0796-LPE SMBGHOST local privilege escalation https://github.com/ZecOps/CVE-2020-0796-LPE-POC https://github.com/danigargu/CVE-2020-0796...

CVE-2025-32462-POC

CVE-2025-32462 – sudo -h Privilege Escalation PoC 🚨 Local privilege escalation exploit for sudo via the -h/--host argument Affects systems with sudo misconfigurations allowing unintended root access. 🧠 About This PoC demonstrates CVE-2025-32462 , a logic flaw in sudo all versions ≤ 1.9.17, where...

NamedPipePTH

NamedPipePTH Este proyecto es un código PoC para usar Pass-the-Hash para autenticación en una tubería con nombre local mediante suplantación de usuario. También hay una entrada de blog con explicación: https://s3cur3th1ssh1t.github.io/Named-Pipe-PTH/ Se basa en gran medida en el código de los...

CVE-2020-26259

CVE-2020-26259 CVE-2020-26259: XStream1.4.14 is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml com.thoughtworks.xstream xstream 1.4.14 poc...

CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

CVE-2014-4688-NodeJs-Exploit

CVE-2014-4688 sudo node --no-warnings exploit.js...

CVE-2017-10617

CVE-2017-10616 & CVE-2017-10617 These two vulnerabilities affect Juniper Contrail version 2.2, 3.0, 3.1 and 3.2: Hard coded credentials CVE-2017-10616 XML External Entity CVE-2017-10617 Vendor security bulletin can be found at Juniper Security Alert JSA10819 2017-10. The vulnerable service in...

CVE-2026-64531

CVE-2026-64531 — OVSwrap Linux kernel Open vSwitch module local privilege escalation normal user → root PoC. Exploits the integer wraparound of the 16-bit nlalen field to escalate from a normal user all the way to root. Vulnerability Summary When the nested action stream generated by OVS exceeds...

aco-prompt-shield

aco-prompt-shield 🛡️ Stop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the 1 security risk for LLM applications. aco-prompt-shield catches known jailbreak patterns, understands semantic intent via ML, and...

pwnkit-helper

Pkexec Local Privilege Escalation PwnKit Exploit source. If You Want To Know More About This Exploit, Check: CVE-2021-4034 This Exploit Helper Work Fine With Python3, And Make Sure You Installed The Packages. Will Make It So Easy To Get The Root Fl4g, GOOD LUCK!...