CVE-2026-82765

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-90691

A security vulnerability has been detected in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is the function FileOperationsManager of the file hexstrikeserver.py of the component API Files Endpoint. The manipulation of the argument filename leads to path...

CVE-2026-82768

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

CVE-2018-20250

exp para Extraer Ejecución de Código de Winrar poc por Ridter ¿cómo usarlo? solo necesitas instalar Python 3.7 y preparar un archivo malicioso que quieras ejecutar, establecer los valores que desees, ¡este script exp generará el archivo malicioso automáticamente! 1. establece los valores que dese...

CVE-2015-57115

CVE-2015-57115 Mass Checker For CVE-2015-57115 Description The CVE-2015-57115 Checker Script is a Python tool for detecting vulnerabilities related to CVE-2015-57115, which is a path traversal vulnerability in certain PHP applications. The script checks multiple URLs for the presence of this...

CVE-2026-14361

CVE-2026-14361 Consul Template's writeToFile helper opened an operator-supplied destination directly and followed linked path components, allowing rendered output to escape the intended directory and overwrite a preexisting file. Intro I found this issue while reviewing HashiCorp Consul Template ...

zip4j

zip4j Este repositorio contiene código fuente descompilado de las versiones 1.3.2 vulnerable y 1.3.3 corregida de la librería zip4j para CVE-2018-1002202, para el dataset CWE-Bench-Java. El repositorio original de zip4j en Github no incluye código de estas versiones. Versiones Versión 1.3.2...

CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script Description CVE-2024-24919 is a vulnerability in Check Point Security Gateway devices that allows unauthorized access to sensitive files through path traversal exploitation. This vulnerability enables an attacker to read the contents of certain files on the target...

vulnerable-mcp-servers-lab

Vulnerable MCP Servers Lab This repository contains intentionally vulnerable implementations of Model Context Protocol MCP servers both local and remote. Each server lives in its own folder and includes a dedicated README.md with full details on what it does , how to run it , and how to...

CVE-2024-34470

CVE-2024-34470 PoC y Escáner Masivo Descripción general Este es un escáner de prueba de concepto PoC y masivo para CVE-2024-34470: la vulnerabilidad de Path Traversal en HSC Mailinspector afecta a todas las versiones hasta la 5.2.18. Cómo usar PoC en acción: Escaneo de objetivo único Para escanea...

NimbusPWN-CVE-2022-29799-29800

NimbusPwn — networkd-dispatcher !NOTE Other distros: dnf install gcc dbus-devel pkgconf Fedora/RHEL or pacman -S gcc db...

CVE-2019-14322

CVE-2019-14322 Modification of faisalfs10x exploit: PoC of CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' https://www.acunetix.com/vulnerabilities/web/odoo-lfi-cve-2019-14322/ https://nvd.nist.gov/vuln/detail/CVE-2019-14322 Description A vulnerability...

xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Remote Code Execution Xerte Online Toolkits versions 3.15 and earlier suffer from 3 vulnerabilities in the /editor/elfinder/php/connector.php component, which may be chained together by an unauthenticated attacker to achieve Remote Code Execution RCE. Affected Version...

CVE-2019-19781-Checker

Comprobador CVE-2019-19781 Compruebe si su sitio web es vulnerable a CVE-2019-19781 VISITE https://citrix-checker.com PARA COMPROBAR SI ES VULNERABLE A CVE-2019-19781 POR FAVOR, USE NUESTRO COMPROBADOR DOS VECES PARA ASEGURARSE Este sitio web le proporciona los resultados si su servicio es...

Grafana-8.3-Directory-Traversal

CVE-2021-43798 Python script Description: Grafana 8.3.0 Directory Traversal Try this if EDB-ID 50581 is not working! Original Article: https://ethicalhacking.uk/cve-2021-43798-dissecting-the-grafana-path-traversal-vulnerability/gsc.tab=0 During a box in OffSec Proving Ground Fanatastic, I...

CVE-2024-48914

Esta publicación es un artículo de investigación publicado por EQSTLab. Gracias aRajesh Sharma, quien descubrió esta vulnerabilidad. CVE-2024-48914 ★ CVE-2024-48914 PoC de Lectura Arbitraria de Archivos y DoS ★ Descripción CVE-2024-48914 : Vulnerabilidad de lectura arbitraria de archivos y DoS en...

CVE-2026-24849

CVE-2026-24849 OpenEMR Lectura Arbitraria de Archivos Autenticada EtherFax disposeDoc Probado en: OpenEMR Versión = 7.0.2 Exploit de prueba de concepto para CVE-2026-24849 , un path traversal / lectura arbitraria de archivos autenticada en el módulo Fax/SMS EtherFax de OpenEMR. Cualquier usuario...

My-Exploits

My-Exploits Vulnerability research I have done on four widely deployed platform services: Keycloak, Apache NiFi, HashiCorp Vault and HashiCorp Nomad. For each finding this repo carries the write-once artifacts I actually use, a Metasploit module where it made sense, a standalone Python proof of...