apache-web-log-analysis-lab

Apache Web Log Analysis Lab Blue Team lab focused on analyzing Apache HTTP server logs to detect web scanning activity, directory enumeration, and path traversal attempts. Objective Install and expose an Apache web server in an isolated lab environment, simulate automated web scanning using...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

Grafana-Final-Scanner

Grafana Final Scanner A command-line vulnerability scanner for Grafana. It fingerprints the installed Grafana version, runs a set of version-aware CVE checks, audits common configuration weaknesses, stores results in a local database, and can serve them through a small web dashboard. Legal This...

CVE-2026-119480

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1...

CVE-2026-119480 WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1...

CVE-2026-119480

The Crocoblock JetFormBuilder plugin (versions through 3.6.7.1 ) is vulnerable to a Path Traversal (CWE-22) vulnerability. This flaw allows an attacker to bypass directory restrictions to access or manipulate files outside the intended directory. The vulnerability is linked to an Attachment Delet...

EUVD-2026-114862

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1...

CVE-2026-119480 WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1...

grafana-CVE-2021-43798

Grafana CVE Scan 21-43798 0.1 Scanner for Grafana Path Traversal Vulnerability found in CVE-2021-43798 Disclaimer: This is for Educational Purposes only! References for CVE: 1 - NIST CVE Details 2 - Grafana Notes Workarounds All installations between v8.0.0-beta1 and v8.3.0 should be upgraded as...

CVE-2019-16278

CVE-2019-16278 Simple Python script to exploit CVE-2019-16278 due to a path traversal vulnerability that leads to unauthenticated RCE. Usage: python3 nostroSploit.py targetIP targetPort optional command to run Inspired by:...

Webasyst Shop-Script CMS Path Traversal

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

cve-2021-41773-and-cve-2021-42013

cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...

Fast-Google-Dorks-Scan

Fast Google Dorks Scan The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated. Usage example: chmod +x...

CVE_2024_42007

CVE-2024-42007 - php-spx Path Traversal Exploit This repository contains a Python 3 proof-of-concept PoC script for CVE-2024-42007. Vulnerability Summary: php-spx = 0.4.15 suffers from a path traversal vulnerability via the SPXUIURI parameter, allowing unauthenticated attackers to read arbitrary...

UPnPHostFileRead

Description Local arbitrary file read PoC exploit for the Windows UPnP Device Host service. Reads an arbitrary file in the context of LOCAL SERVICE. Tested against Windows 11 Pro build 26200.8457. Reported to Microsoft. Assessed as "not a vulnerability". How to Build 1. Clone the repository. 2...

CVE-2026-120308

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the identifier names a volume that workspace...

CVE-2026-120308 Beta9 host filesystem exposure via volume path traversal

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the identifier names a volume that workspace...

CVE-2026-120308

A Beta9 tenant can exploit a path traversal vulnerability when deploying a function, endpoint, or task queue to access the host filesystem. The vulnerability occurs because the gateway joins the shared volumes root, workspace name, and volume identifier without verifying that the workspace owns t...

EUVD-2026-114842

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the identifier names a volume that workspace...

CVE-2026-120210

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...