CVE-2021-41773

CVE-2021-41773 exploit PoC with Docker setup. CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-41773:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-41773:1.0 Note: You can also use Image ID...

CVE-2023-26360-adobe-coldfusion-rce-exploit

Critical vulnerabilities in Adobe Coldfusion CVE-2023-26359, CVE-2023-26360 and CVE-2023-26359 On March 8, 2023, Adobe released security updates to address critical vulnerabilities in Adobe ColdFusion, a popular web application development platform. These vulnerabilities, classified as improper...

CVE-2026-29519-Lucee-Reflected-XSS

CVE-2026-29519-Lucee-Reflected-XSS Proof of Concept for Reflected XSS in Lucee CFML CVE-2026-29519 Framework 0-Day: Reflected XSS in Lucee CFML URL Parsing Affects Enterprise Deployments Versions 5.3.1.95 to 7.x Discoverer: Fouad Milat lavado Date Discovered: December 6, 2025 CVE: CVE-2026-29519...

CVE-2021-41773

CVE-2021-41773 PoC — Apache HTTP Server Path Traversal Overview CVE-2021-41773 is a path traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability allows an attacker to access files outside the intended directory under specific configurations, particularly when directories ar...

Apache-OFBiz-Directory-Traversal-exploit

Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...

CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. Usage python CVE-2024-45440.py Lab Deployment settings.php will replace the settings.ph...

CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC Let's start by deciding on a base image. The arrangement of libraries in the system depends on what it will be. For example, for alpine it will be /usr/lib64/, for ubuntu it will be /usr/lib/x8664-linux-gnu. We will use ubuntu as a base image. FROM ubuntu The nvidi...

CVE-2024-53677-Docker

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code executio...

CVE-2006-3392

CVE-2006-3392 Description Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are...

Rails-doubletap-RCE

Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — NLTK Path Traversal Lab A small, reproducible Docker lab that contrasts the percent-encoded path traversal behavior in NLTK 3.9.4 with the corrected behavior in NLTK 3.10.0. The vulnerable version validates the resource name before URL decoding. The fixed payload...

wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 20th Aug 2020 Wordpress Plugin 0day elFinder vulnerability is a well-know vulnerability, my script only changes path to "/wp-content/plugins/wp-file-manager/". Stop requesting fixes in script or something else for me. RTFM... References:...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented application and integration platform that provid...

CVE-2025-4632_POC

Samsung MagicINFO 9 Server Exploit CVE-2025-4632 This repository contains a Python replication script for CVE-2025-4632, an Unauthenticated Remote Code Execution RCE vulnerability in Samsung MagicINFO 9 Server versions prior to 21.1052. The vulnerability exists due to an improper limitation of a...

PT-2026-133491

Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path traversal vulnerability in the Blackboard question import format. Teachers with question import or lesson edit rights can upload a crafted zip with img src values containing ../...

CVE-2026-62331: mtzanidakis praktor: praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission…

praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Control UI. Prior to 0.9.1, both Telegram upload sites in internal/telegram/bot.go concatenate the attacker-controlled document filename into a destination path without sanitization,...

CVE-2026-117183: n/a: A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape…

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL...

PT-2026-133524

CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in the /doc route. Every CallBackery application mounts its documentation plugin at /doc, ahead of any session check. The route passes the requested name to Pod::Simple::Search-find...

PT-2026-133523

HTTP::Parser::XS versions before 0.18 for Perl truncate PATH INFO at an encoded NUL byte in parse http request. The XS parser URL-decodes the request path and measures the result with strlen, so PATH INFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote...

PT-2026-133495

n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticated attackers to reach arbitrary Databricks API endpoints by injecting unencoded resource identifiers. Attackers can supply ../ sequences and query strings via webhook, chat, or...