CVE-2024-27292

CVE-2024-27292 : Docassemble V1.4.96 Path Traversal non autenticato Strumento CVEHunter per il rilevamento e lo sfruttamento della vulnerabilità CVE-2024-27292 con prestazioni asincrone. Installazione root@kitploit: git clone https://github.com/th3gokul/CVE-2024-27292.git cd CVE-2024-27292 pip...

hack-winrar

hack-winrar WinRar è un software molto conosciuto per Windows. La versione precedente di WinRaR presentava una vulnerabilità che è stata corretta a Febbraio 2019. La maggior parte delle persone non ha aggiornato WinRar, quindi sono vulnerabili a questo bug di Absolute Path Traversal CVE-2018-2025...

CVE-2025-8088-Exploit

CVE-2025-8088 WinRAR-Exploit 🔓 Ein Proof-of-Concept-Exploit für die WinRAR-Sicherheitslücke CVE-2025-8088, die Version 7.12 und ältere betrifft. Dieses Tool erstellt ein bösartiges RAR-Archiv, das Payloads in Alternate Data Streams ADS mit Path Traversal einbettet und möglicherweise zur Ausführun...

CVE-2020-12112

CVE-2020-12112 🚨 Le versioni di BigBlueButton precedenti alla 2.2.4 presentano una vulnerabilità LFI che consente l'accesso a file sensibili. Storia 📜 Durante un corso a distanza su un'istanza BigBlueButton, uno studente della mia classe ha condiviso il link alla presentazione di diapositive del...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Path Traversal Pré-Autenticação Todos os créditos vão para j0v e seu tweet https://twitter.com/j0v0x0/status/1466845212626542607 Isenção de Responsabilidade Isso é apenas para fins educacionais. Não sou responsável por suas ações. Use por sua conta e risco. De boa fé,...

BypassFuzzer

Bypass Fuzzer Der ursprüngliche 403fuzzer.py : ==Hinweis: Dies wurde zugunsten meiner neuen, glänzenden Burp-Erweiterung, die 1000000% besser ist, eingestellt. Vielen Dank, dass Sie meine Tools verwenden!== Die Erweiterung finden Sie hier: https://github.com/intrudir/BypassFuzzer-Burp Fuzzen von...

privesc-CVE-2015-5602

Sudo =1.8.14 Escalation locale dei privilegi Sudo su "do" consente a un amministratore di sistema di dare a determinati utenti o gruppi di utenti la possibilità di eseguire alcuni o tutti i comandi come root, registrando tutti i comandi e gli argomenti. Ambiente vulnerabile Per configurare un...

EUVD-2026-67298

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...

EUVD-2026-67286

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...

EUVD-2026-67322

A path traversal vulnerability exists in the built-in preview/development web server of Lektor 3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensiti...

EUVD-2026-67291

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...

EUVD-2026-67327

The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...

CVE-2024-25600-mass

carregamento em massa de shell para cve root@kitploit: python3 exploit.py -l yourlist.txt caminho da shell root@kitploit: https://examplewebsite.com/asd.php...

CVE-2026-81847

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...

CVE-2026-81845

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...

CVE-2026-81837

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-75337

The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...

CVE-2026-54083

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

CVE-2026-53571

CVE-2026-53571 CVE-2026-53571 server.fs.deny Umgehung auf Windows alternativen Pfaden PoC. Der Inhalt von Dateien, die durch server.fs.deny festgelegt sind, kann im Browser unter Windows zurückgegeben werden. root@kitploit: mkdir CVE-2026-53571 cd CVE-2026-53571 npm init -y npm install...

CVE-2024-6473-PoC

CVE-2024-6473 PoC Yandex Browser für den Desktop vor 24.7.1.380 hat eine DLL-Hijacking -Sicherheitslücke, da ein nicht vertrauenswürdiger Suchpfad verwendet wird. Anfällige Browserversion !IMPORTANT Das Internet muss während der Installation ausgeschaltet sein, da der Browser sonst aktualisiert...