CVE-2024-36991

CVE-2024-36991: Path traversal, затрагивающий Splunk Enterprise на Windows версиях ниже 9.2.2, 9.1.5 и 9.0.10. Инструмент CVEHunter для обнаружения и эксплуатации уязвимости CVE-2024-36991 с асинхронной производительностью. Установка root@kitploit: git clone...

CVE-2025-5880-PoC

CVE-2025-5880 — Whistle 2.9.98 경로 탐색 PoC Whistle v2.9.98의 인증되지 않은 경로 탐색 취약점에 대한 개념 증명 익스플로잇. 취약점 요약...

CVE-2022-27925

CVE-2022-27925 Description Le 10 mai 2022, Zimbra a publié les versions 9.0.0 patch 24 et 8.8.15 patch 31 pour corriger plusieurs vulnérabilités dans Zimbra Collaboration Suite, notamment CVE-2022-27924 dont nous avons parlé précédemment et CVE-2022-27925. Initialement, Zimbra a qualifié...

docker-lab-cve-2017-5638-cve-2021-41773

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 7ホスト構成のDockerベース攻撃エミュレーションラボです。多段階のキルチェーン、横展開、多地点でのIDS検知を実演するために設計されています。 概要 このラボは、攻撃者が初期偵察から足場の確保、そしてピボティングを経て高価値ターゲットに到達するまでをシミュレートする、現実的なネットワーク環境を再現します。重要なホストにはサイドカーとして2つの独立したSuricata IDSインスタンスが併設されており、攻撃ライフサイクル全体を「防御側の視点」で観察できます。 キルチェーン 1...

CVE-2026-49049

Investigación de la vulnerabilidad CVE-2026-49049: Unauthenticated Arbitrary File Write en JoomShaper Helix3 Joomla El repositorio contiene materiales, análisis técnico y Proof of Concept PoC para la vulnerabilidad crítica CVE-2026-49049 , encontrada en el framework de plantillas heredado Helix3 ...

POC_CVE-2024-4322

CVE-2024-4322: LoLLMS WebUI PoC और Nuclei सत्यापन प्रयोगशाला यह रिपॉजिटरी CVE-2024-4322 को पुनरुत्पादित करने के लिए Dockerized स्थानीय प्रयोगशालाएं प्रदान करता है, जो LoLLMS WebUI v9.6 में एक पथ ट्रैवर्सल भेद्यता है, और यह सत्यापित करने के लिए कि संबद्ध Nuclei टेम्पलेट LoLLMS WebUI v9.8 से मेल नह...

CVE-2019-1010268

CVE-2019-1010268에 대한 PoC 익스플로잇 작성자: Tonyynot14 Kali Linux를 사용하여 테스트됨 영감을 얻은 출처: https://www.exploit-db.com/exploits/43113 사용법 root@kitploit: python3 exploit.py -l domainname -a apppath -r /etc/passwd...

Important: Red Hat Security Advisory: iscsi-initiator-utils security update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...

CVE-2024-0204

CVE-2024-0204: Fortra GoAnywhere MFT प्रमाणीकरण बाईपास गहराई से जांच इस रिपॉजिटरी में Fortra के GoAnywhere MFT उत्पाद में खोजी गई प्रमाणीकरण बाईपास भेद्यता CVE-2024-0204 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट शामिल है। यह भेद्यता एक अप्रमाणित हमलावर को एप्लिकेशन के लिए एक प्रशासनिक उपयोगकर्ता...

CVE-2021-38819

CVE-2021-38819...

shiro-cve-2010-3863

Apache Shiro Path Traversal CVE-2010-3863 Reproduktion der Schwachstelle Lokale Umgebung mit Docker einrichten Yakit öffnen und Pakete abfangen Payload: /./admin/ Erfolgreich...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Progetto di ricerca educativo. Tutti i test sono stati eseguiti in un laboratorio Docker isolato. Non utilizzare contro sistemi che non possiedi. Riepilogo della vulnerabilità...

HackTheBox-Facts

HTB Facts — Rédaction complète Difficulté : Medium OS : Linux Mots-clés : Web, MinIO, Camaleon CMS, Contournement de chemin, SSTI, Élévation de privilèges Table des matières 1. Reconnaissance 2. Énumération web — Port 80 3. Découverte de MinIO — Port 54321 4. Camaleon CMS — Accès administrateur 5...

CVE-2026-47862 ZipTransformer uses file_name header to build workDirectory path without sanitization

An attacker who can set the filename header on a message reaching a ZipTransformer with ZipResultType.FILE the default can cause the resulting .zip archive to be written to an arbitrary filesystem path outside the configured workDirectory. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5...

CVE-2026-47862

Spring Integration's ZipTransformer component is vulnerable to a path traversal issue when using the default ZipResultType.FILE result type. An attacker who can set the file_name message header on a message reaching the transformer can cause the resulting .zip archive to be written to an arbitrar...

zenml-CVE-2024-2083-POC

CVE-2024-2083 – PoC per lettura arbitraria di file in ZenML Questo repository dimostra come riprodurre CVE-2024-2083 , una vulnerabilità di lettura arbitraria di file in ZenML. Il problema consente a un attaccante di leggere file dal filesystem del server abusando del campo logs.uri nella richies...

FORTIWEB_CVE-2025-64446-58034

Simulazione di sfruttamento di FortiWeb CVE-2025-64446 e CVE-2025-58034 Nota: Questo documento ha solo scopo didattico e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica FortiWeb è un dispositivo Web Application Firewall WAF utilizzato per...

CVE-2021-43798

CVE-2021-43798 1. الملخص Grafana هي منصة مفتوحة المصدر تدعم مراقبة البيانات وإدارتها، وتوجد في الإصدارات التالية ثغرة اجتياز المسار Path Traversal التي تسمح بالتلاعب بمسارات الملفات باستخدام أحرف خاصة مثل ../. 8.0.0 وما فوق، وأقل من 8.0.7 8.1.0 وما فوق، وأقل من 8.1.8 8.2.0 وما فوق، وأقل من 8.2.7...

CVE-2019-16278

Exploit per CVE-2019-16278 e CVE-2019-16279 Nostromo httpd è soggetto a 2 vulnerabilità critiche per versioni &1 Questo bug è dovuto a una correzione incompleta per CVE-2011-0751. Possiamo aggirare un controllo per che ci permette di eseguire con argomenti arbitrari...