Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...

Gitblit 1.9.3 - Local File Inclusion

Gitblit 1.9.3 is vulnerable to local file inclusion via /resources//../ e.g., followed by a WEB-INF or META-INF pathname. id: CVE-2022-31268 info: name: Gitblit 1.9.3 - Local File Inclusion author: 0xAkoko severity: high description: | Gitblit 1.9.3 is vulnerable to local file inclusion via...

Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversal

Carel pCOWeb HVAC BACnet Gateway 2.1.0 contains an unauthenticated arbitrary file disclosure caused by improper verification of the 'file' GET parameter in logdownload.cgi, letting attackers disclose sensitive files via directory traversal, exploit requires no authentication. id: CVE-2022-37122...

FlatnuX CMS - Directory Traversal

A path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 allows remote administrators to read arbitrary files via a full pathname in the dir parameter in a contents/Files action. id: CVE-2012-4878 info: name: FlatnuX CMS - Directory Traversal author: daffainfo severity:...

emlog 5.3.1 Path Disclosure

emlog v5.3.1 is susceptible to full path disclosure via t/index.php, which allows an attacker to see the path to the webroot/file. id: CVE-2021-3293 info: name: emlog 5.3.1 Path Disclosure author: h1ei1 severity: medium description: emlog v5.3.1 is susceptible to full path disclosure via...

webp_server_go 0.4.0 - Path Traversal

webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. id: CVE-2021-46104 info: name: webpservergo 0.4.0 - Path Traversal author: pikpikcu severity...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

DedeCMS 5.7 - Path Disclosure

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php id: CVE-2018-6910 info: name: DedeCMS 5.7 - Path Disclosure author: pikpikcu severity: high description: DedeCMS 5.7 allows remote attackers to discover t...

QNAP Photo Station - Path Traversal

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. id: CVE-2019-7195 info: name: QNAP Photo Station - Path Traversal author: s4e-io severity: critical description: | QNAP devices running Pho...

Docmost 0.2.1-0.21.0 - Arbitrary File Read

Docmost v0.21.0 contains a path traversal caused by improper handling of avatar attachments, letting unauthenticated attackers disclose local files via a POST request on a public URL. id: CVE-2025-57231 info: name: Docmost 0.2.1-0.21.0 - Arbitrary File Read author: anirbala98 severity: high...

Campaign Monitor for WordPress - Information Disclosure

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

Korenix JetPort 5601v3 - Path Traversal

The pathname of the root directory to a Restricted Directory 'Path Traversal' vulnerability in Korenix JetPort 5601 allows Path Traversal.This issue affects JetPort 5601- through 1.2. id: CVE-2024-11303 info: name: Korenix JetPort 5601v3 - Path Traversal author: geeknik severity: high description...

openSIS v9.0 - Path Traversal

A path traversal vulnerability exists in openSIS Classic Community Edition v9.0 via the 'filename' parameter in DownloadWindow.php. An unauthenticated remote attacker can exploit this to read arbitrary files on the server by manipulating file paths. id: CVE-2023-38879 info: name: openSIS v9.0 -...

esm.sh <= v136 - Arbitrary File Write via Path Traversal

esm.sh = 136 contains a path traversal caused by improper canonicalization of the X-Zone-Id HTTP header, letting attackers write files outside the intended storage directory, exploit requires crafted header input. id: CVE-2025-59342 info: name: esm.sh = v136 - Arbitrary File Write via Path...

CVE-2023-38831-PoC

CVE-2023-38831 PoC Este repositorio es solo una prueba de concepto para CVE-2023-38831 vulnerabilidad Zero-Day en WinRAR RARLabs WinRAR anterior a 6.23 permite a los atacantes ejecutar código arbitrario cuando un usuario intenta ver un archivo benigno dentro de un archivo ZIP. El problema ocurre...

CVE-2021-43798

CVE-2021-43798 Recorrido de directorios de Grafana Programa simple para explotar el recorrido de directorios de Grafana instalación gem install httparty gem install colorize gem install timeout ruby cve-2021-43798.rb...

SourceLeakHacker

描述 SourceLeakHacker 是一个多线程的Web目录扫描器。 安装 pip install -r requirements.txt 使用 usage: SourceLeakHacker.py options optional arguments: -h, --help 显示此帮助信息并退出 --url URL 要扫描的URL，例如：'http://127.0.0.1/' --urls URLS 包含要扫描的URL的文件，每行一个URL。 --scale full,tiny 内置字典规模 --output OUTPUT 输出文件夹，默认：result/YYYY-MM-DD...

day03-jenkins-23897

Día 3 — Lectura arbitraria de archivos en Jenkins CLI CVE-2024-23897 Idea: Jenkins ≤ 2.441 LTS ≤ 2.426.2 expande @/path dentro de los argumentos de la CLI. Los usuarios no autenticados pueden hacer que Jenkins lea archivos locales y refleje sus primeras líneas a través de la salida de ayuda de la...

CVE-2024-9935

CVE-2024-9935 Elementor Page Builder 的 PDF 生成器插件 = 1.7.5 - 未经认证的任意文件下载 描述 WordPress 的 Elementor Page Builder 插件的 PDF 生成器附加组件在所有版本（包括 1.7.5）中，通过 rtwpgaepbdwnldpdf 函数存在路径遍历漏洞。这使得未经认证的攻击者能够读取服务器上任意文件的内容，其中可能包含敏感信息。 POC GET...

CVE-2006-2842

Badges Licencia MIT Instalación Instalar cve-2006-2842 con npm npm install cve-2006-2842 -g Uso Ejemplo para una sola URL cve-2006-2842 -u http://example.com Uso Ejemplo para una lista de URLs cve-2006-2842 -l urls.txt -o out.txt Capturas de pantalla Menú de ayuda Obtener todos los elementos 👋 Ho...