114628 matches found
CVE-2021-41773
CVE-2021-41773 Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 CVE-2021-41773 Información Se encontró una falla en un cambio realizado en la normalización de rutas en Apache HTTP Server 2.4.49. Un atacante podría usar un ataque de path traversal salto de...
slippy-book-exploit
Slippy-book: EPUB File Parsing Directory Traversal Remote Code Execution CVE-2023-44451 Xreader, CVE-2023-52076AtrilReserved: RCE Vulnerability affected popular Linux Distros including Mint, Kali, Parrot, Manjaro etc. EPUB File Parsing Directory Traversal Remote Code Execution A Critical Path...
CVE-2021-45010-TinyFileManager-Exploit
CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project’s Tiny File Manager = 2.4.3 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve code execution o...
lighty-sqlinj-demo
title: Ep4 - Vulnerabilidad Relacionada con Redes members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Vulnerabilidad relacionada: root@kitploit: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirmación:...
EUVD-2026-66503
In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path errors After commit 9db5b3cec4ec "mptcp: borrow forward memory from subflow", errors in the receive path prior to queueing skbs into the receive queue do not trigger...
EUVD-2026-66379
Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...
CVE-2022-22978
CVE-2022-22978 Spring Security Spring Security 우회 성공 http://localhost:9090/login%0a SayMyName으로 Spring Security 우회 실패 http://localhost:9090/name%0d Custom RBAC으로 Spring Security 우회 실패 http://localhost:9090/admin/admin%0d Annotation RBAC으로 Spring Security 우회 실패 http://localhost:9090/user/user%0a...
CVE-2021-31956
CVE-2021-31956 exploit bastante estable en win10 20h2 crea una nueva ventana de consola, así que cámbiala si no te gusta ah, y más importante, cambia la ruta de createfilea a un directorio escribible real en el disco...
CVE-2020-9484
Apache Tomcat Deserialization Vulnerability CVE-2020-9484 Vulnerable target setup Clone this repository Run docker-compose up -d That's it ! Exploit POC Run curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx File named coldfx gets created in tmp...
CVE-2026-22444
CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview This vulnerability was discovered and disclosed to Apache in 2025. It affects Apache Solr's core creation functionality, where network access to UNC paths occurs before path validation checks are performed. On Windows systems...
ViteVulScan
ViteVulScan Introducción a las vulnerabilidades Este proyecto cubre 3 vulnerabilidades: CVE-2025-30208 / CVE-2025-31125 / CVE-2025-31486, todas relacionadas con la lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas tres vulnerabilidades tienen una amplia cobertura y son...
CVE-2021-43798
CVE-2021-43798 Recorrido de directorios de Grafana Programa simple para explotar el recorrido de directorios de Grafana instalación gem install httparty gem install colorize gem install timeout ruby cve-2021-43798.rb...
CVE-2023-26360-adobe-coldfusion-rce-exploit
Vulnerabilidades críticas en Adobe Coldfusion CVE-2023-26359, CVE-2023-26360 y CVE-2023-26359 El 8 de marzo de 2023, Adobe publicó actualizaciones de seguridad para abordar vulnerabilidades críticas en Adobe ColdFusion, una plataforma popular de desarrollo de aplicaciones web. Estas...
CVE-2026-7020
CVE-2026-7020 Ollama arbitrary file read via tensor digest path traversal. Exfiltrates SSH host keys and any other file from a reachable Ollama host in three unauthenticated API calls. Writeup: Co-Researcher @gouldnicholas Usage root@kitploit: python3 poc.py Tries all three SSH host key types wit...
CVE-2026-1357-POC
CVE-2026-1357 — WPvivid Backup & Migration RCE CVE クレジット: Lucas Montes NiRoX ツール作成者: CyberTechAjju CVSS: 9.8 Critical | 影響を受けるバージョン: ≤ 0.9.123 | 修正済み: 0.9.124 ⚠️ 免責事項 許可されたセキュリティテスト専用 です。システムへの不正アクセスは違法です。 概要 WPvivid Backup & Migration における、2つの連鎖するバグによる認証なし RCE: 1. Crypto Fail-Open —...
CVE-2024-36991
Splunk Path Traversal Exploit CVE-2024-36991 Description This is a Proof-of-Concept PoC exploit script for CVE-2024-36991 , a path traversal vulnerability affecting Splunk Enterprise on Windows versions below: 9.2.2 9.1.5 9.0.10 The vulnerability allows unauthenticated attackers to access sensiti...
EUVD-2026-66879
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...
EUVD-2026-66878
The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...
CVE-2026-1056-POC
CVE-2026-1056-POC Snow Monkey Forms - 未認証の任意ファイル削除 PoC このリポジトリには、Snow Monkey Forms WordPress プラグイン（バージョン = 12.0.3）の重大な脆弱性に対する Proof of Concept（PoC）が含まれています。この脆弱性により、未認証の攻撃者 がパストラバーサルを介してサーバー上の任意のファイルを削除できます。 参照: Sarawut Poolkhet MisterHelloz 脆弱性の詳細 タイプ: 任意ファイル削除 / パストラバーサル コンポーネント:...