n8n-cve-2026-21858

n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — استغلال n8n لقراءة ملف غير مصادق عليه إلى تنفيذ RCE...

CVE-2024-24919

Mass Auto Scanner for CVE-2024-24919 This script is designed to scan a list of URLs for the CVE-2024-24919 vulnerability on remote Check Point firewalls. It attempts to exploit the vulnerability by sending a malicious POST request to extract specified files from the target servers. Running the...

CVE-2021-45067

CVE-2021-45067 Ce bogue était une lecture hors limites causée par le traitement d'une chaîne ANSI en tant qu'Unicode, qui peut être exploitée pour fuiter des informations sensibles depuis le processus Adobe Reader isolé. Blog Adobe Reader - XFA - Confusion ANSI/Unicode - Fuite d'informations Avis...

CVE-2021-39433

CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

CVE-2022-44268 ImageMagick Arbitrary File Read PoC PoC for CVE-2022-44268 ImageMagick Arbitrary File Read PoC - Payload generator This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any...

CVE-2024-30851-jasmin-ransomware-path-traversal-poc

Jasmin ransomware web panel path traversal PoC EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware I discovered a pre-auth path traversal vulnerability in the Jasmin Ransomware web panel CVE-2024-30851, allowing an attacker to deanonymize panel operators and dump decryption keys...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafana File-Read Affected versions: 8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Default plugins list root@kitploit: alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge...

CVE-2026-36834

सारांश src/decoders/pana8.cpp में एक आउट-ऑफ-बाउंड्स एरे रीड मौजूद है। जब कोई हफ़मैन तालिका मिलान नहीं मिलता है, तो फ़ंक्शन GetDBit मान 17 लौटा सकता है, लेकिन huffcoeff केवल 17 तत्वों मान्य सूचकांक 0-16 के साथ घोषित किया गया है। इसके परिणामस्वरूप huffcoeff17 तक पहुँचा जाता है, जो UBSan और...

CVE-2026-37066

CVE-2026-37066 Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with super administrator role to disclose sensitive information via two specially crafted http requests POST...

mtkclient

Language: 🇺🇸 🇨🇳 MTKClient Just some mtk tool for exploitation, reading/writing flash and doing crazy stuff. For windows, you need to install the stock mtk port and the usbdk driver see instructions below. For linux, a patched kernel is only needed when using old kamakiri see Setup folder except for...

CVE-2024-40422

CVE-2024-40422 Found this on exploit-db, decided to make my own for practice. This exploit will search out the passwd file and print the contents on a vulnerable system. This script exploits a path transversal vulnerability in Devika v1. Credit to Alperen Ergel for finding the vulnerability to...

cve-2022-44268-detector

cve-2022-44268-detector - كشف ملفات PNG الخبيثة cve-2022-44268-detector هو برنامج بلغة Go يستهلك ملفات PNG ويبلّغ عما إذا كانت تبدو كصور خبيثة ناتجة عن استغلال CVE-2022-44268، وهي ثغرة في ImageMagick تتيح للمهاجمين قراءة محتويات ملفات عشوائية باستخدام صور مصمّمة خصيصًا. التثبيت لتثبيت...

CVE-2022-0847-Container-Escape

CVE-2022-0847 CVE-2022-0847 used to achieve container escape overwrite any read-only files on host Slides in Chinese available here 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸（效果为覆写宿主机上任意只读文件） 中文汇报PPT在这里 Introduction If the kernel is vulnerable to CVE-2022-0847, the attacker can overwrite read-only files...

CVE-2024-23897

Jenkins File Read Vulnerability - CVE-2024-23897 CVE-2024-23897 is a critical vulnerability in Jenkins that allows unauthenticated attackers to read arbitrary files on the Jenkins controller's file system. This flaw arises from improper handling of command arguments in the args4j library,...

wp2shell-compromise-scanner-plugin

wp2shell के लिए कॉम्प्रोमाइज़ स्कैनर केवल-पठन एक स्वतंत्र, केवल-पठन WordPress प्लगइन जो आपके डेटाबेस और प्लगइन निर्देशिका को इस बात के संकेतों के लिए स्कैन करता है कि wp2shell कोर श्रृंखला CVE-2026-63030 + CVE-2026-60137 का शोषण किया गया था — भले ही यह हफ्तों पहले हुआ हो या हमलावर ने सफाई कर दी ह...

CVE-2024-40348

CVE-2024-40348 POC for CVE-2024-40348 Bazaar v1.4.3 and prior. Will attempt to read /etc/passwd from target. Overview This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovere...

CVE-2021-43798-Grafana-Exp

Grafana V8. Arbitrary File Read Exploit – Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is commonly used as a visualizer for time series data and application analytics in infrastructure, and is also widely adopted in oth...

GhostKatz

GhostKatz Extract LSASS credentials directly from physical memory by abusing signed vulnerable drivers with physical memory read primitives via MmMapIoSpace, bypassing traditional user-mode detection capabilities. This tool was developed in collaboration between Julian Peña and Eric Esquivel. Thi...

CVE-2020-10560

CVE-2020-10560 CVE-2020-10560 OSSN मनमाना फ़ाइल पढ़ना इस रिपॉजिटरी का उपयोग कैसे करें, इसके विवरण के लिए देखें https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read प्रारंभ करना docker-compose up --build स्थापना एक बार इमेजेस चल रही हों, तो आप 127.0.0.1 या 10.2.0.101 पर स्थापना पृष...

cynative

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning through GitHub, GitLab,...