cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...

shiro-cve-2020-17523

Apache Shiro Two Postures Authentication Bypass Analysis CVE-2020-17523 0x01 Vulnerability Description Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro's easy-to-understand API, you can...

CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Proof of Concept CVE-2024-32019 — ndsudo local privilege escalation via untrusted search path. 🔧 Compile the Exploit x8664-linux-gnu-gcc -o nvme exploit.c -static 📤 Deploy on Target Machine 1. Transfer the compiled...

CVE-2026-112147 ai-genius-automations octoally index.ts information disclosure

A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made...

CVE-2026-112147

A vulnerability exists in ai-genius-automations octoally up to version 1.0.87 due to a flaw in an unknown function within server/src/index.ts . An attacker can perform a remote manipulation of the argument path , leading to information disclosure . The exploit has been made public and is availabl...

CVE-2021-43798

CVE-2021-43798 Grafana directory traversal simple program for exploit grafana directory traversal install gem install httparty gem install colorize gem install timeout ruby cve-2021-43798.rb...

BurpSuite_403Bypasser

403Bypasser An burpsuite extension to bypass 403 restricted directory. By using PassiveScan default enabled, each 403 request will be automatically scanned by this extension, so just add to burpsuite and enjoy. Payloads: $1: HOSTNAME $2: PATH $1/$2 $1/%2e/$2 $1/$2/. $1//$2// $1/./$2/./...

CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

CVE-2025-6218-POC

CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...

CVE-2024-48990

CVE-2024-48990 hello this is 0x3bs In victim machine: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib in attacker machine to compile lib.c in attacker machine : gcc -shared -fPIC -o exp.so lib.c and in vivtim machine : in /tmp chmod +x run.sh in...

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Version Spring Framework 5.2.20 and 5.3.18 Patched version: Spring Framework 5.3.18 and 5.2.20 Spring Boot 2.6.6 and 2.5.12 Details Spring Core is the core component of Spring Framework. This is the foundation to build other components in the Spring Framework...

NVMS-1000-Directory-Traversal-Bash

NVMS-1000-Directory-Traversal-Bash Directory Traversal Exploit written in Bash for NVMS-1000 CVE-2019-20085. Usage ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Example ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Disclaimer This POC was created for educational purposes...

CVE-2024-32019-PoC

CVE-2024-32019-PoC Bash script for Privilege Escalation via "ndsudo" Netdata Local Exploit Netdata Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 Vulnerability Description The "ndsudo" tool runs a restricted set of external commands, but the search paths are supplied by the "PATH"...

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

CVE-2025-44137

CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creati...

CVE-2025-69599

CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...

CVE-2024-32019-ndsudo

The ndsudo vulnerability allows an attacker to gain root permissions by exploiting an untrusted search path in the ndsudo tool, which is part of the Netdata Agent. This can enable the execution of arbitrary programs with elevated privileges if the attacker places a malicious binary in a writable...

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

CVE-2026-76182

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...