php_filter_chains_oracle_exploit_for_CVE-2023-6199

PHP filter chains: file read from error-based oracle. Updated Script to exploit CVE-2023-6199 A CLI to exploit parameters affected by the file read caused by the the error-based oracle of PHP filter chains. It can be used to leak the content of a local file when passed to vulnerable functions, su...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Jellyfin arbitrary file read Wker script, batchable. The logic is very simple, it checks for the existence of win.ini via GET: root@kitploit: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ define info = CVE-2021-21402...

CVE-2022-1386

CVE-2022-1386 - Fusion Builder 3.6.2 - Unauthenticated SSRF Description Fusion Builder is a WordPress plugin that allows users to create and edit pages using a drag-and-drop interface. It is vulnerable to an unauthenticated SSRF that allows an attacker to read any file on the server. Proof of...

CVE-2020-1938-Tomact-file_include-file_read

CVE-2020-1938Tomcat-fileinclude and filered Tomcat के फ़ाइल इन्क्लूड और फ़ाइल पढ़ने की कमज़ोरी का शोषण POC फ़ाइल पढ़ना Usage :python2 "Tomcat-ROOT路径下文件读取CVE-2020-1938.py" -p 8009 -f /test.txt 127.0.0.1 फ़ाइल शामिल करना Usage :python2 "Tomcat-ROOT路径下文件包含CVE-2020-1938.py" -p 8009 -f /test.txt...

CVE-2023-35843

CVE-2023-35843 CVE-2023-35843 Arbitrary File Read Vulnerability...

CVE-2026-36848

CVE-2026-36848 تم تحديد ثغرة حرجة في اجتياز المسار Path Traversal في محرك الإدارة القائم على الويب على المنفذ 8089 لأجهزة Gigamon-VUE OS GVOS. توجد هذه الثغرة في النظام الفرعي القديم H-VUE داخل الخفي persistd، وتسمح لمهاجم عن بُعد غير مصادق مع إمكانية الوصول إلى الشبكة على الخدمة بقراءة ملفات...

pfsense-security-research

pfSense 2.8.0 में डायग्नोस्टिक्स वेब इंटरफ़ेस के माध्यम से प्रमाणित मनमाना फ़ाइल पढ़ना CVE ID: CVE-2025-53392 दिनांक: 2025-06-27 लेखक: Seth Kraft विक्रेता होमपेज: https://www.netgate.com/ विक्रेता परिवर्तन सूची:...

CVE-2025-5777

CVE-2025-5777 AKA CitrixBleed 2 Is an OOB read in the login process of Citrix Gateway. This is a Proof of Concept exploiting the OOB CVE-2025-5777 to obtain memory data from a vulnerable Citrix Gateway instance, possibly leading to cookies/credentials theft. Usage I highly recommend using a venv...

CVE-2023-40028

CVE-2023-40028 Exploit This script exploits a vulnerability in Ghost CMS, allowing arbitrary file read through symbolic link abuse. Features Creates a symlink to the target file Compresses the payload into a ZIP file Uploads the ZIP file via the Ghost API Reads the file through an accessible imag...

CVE-2026-65761

CVE-2026-65761 — EasyStore Joomla पूर्व-प्रमाणीकरण SQL इंजेक्शन filtersortby दिशा → ORDER BY इंजेक्शन → पूर्ण DB पढ़ना अवलोकन CVE-2026-65761 CVSS 9.3 गंभीर JoomShaper द्वारा Joomla के लिए EasyStore में एक अप्रमाणित SQL इंजेक्शन है, जो संस्करणों ≤ 2.0.1 को प्रभावित करता है। filtersortby उत्पाद सूच...

CVE-2024-43044-jenkins-creds

مقدمة هذا استغلال لـ CVE-2024-43044، وهي قراءة ملفات تعسفية تسمح للوكيل بجلب ملفات من المتحكم. سيستخدم الاستغلال الثغرة لقراءة ملف credentials.xml والحصول على المفاتيح السرية لفك تشفيره. الكود الأولي : https://github.com/convisolabs/CVE-2024-43044-jenkins الشرح الأصلي :...

Grafana-CVE-2024-9264

Grafana-CVE-2024-9264 root@kitploit: POST /api/ds/query?dstype=expr&expression=true&requestId=Q100 HTTP/1.1 Host: 127.0.0.1:3000 Content-Type: application/json Cookie: grafanasession=a739fa9aeb235f2790f17de00fefe528 Content-Length: 368 "from": "1696154400000", "to": "1696345200000", "queries":...

CVE-2021-29447

CVE-2021-29447 वर्डप्रेस 5.6-5.7 - प्रमाणित Author+ XXE https://blog.wpsec.com/wordpress-xxe-in-media-library-cve-2021-29447/ उपयोग: -l LHOST उदाहरण: 127.0.0.1 -n NAME उदाहरण: payload.wav -dn DTDNAME उदाहरण: evil.dtd -r READ उदाहरण: ../wp-config.php evil-wav-dtd-xxe.py: error: the following...

AttackTomcat

AttackTomcat Vulnerability Detection List CVE-2017-12615 PUT file upload vulnerability tomcat-pass-getshell weak authentication deployment war package Weak password brute force CVE-2020-1938 Tomcat file read/inclusion Usage Before first use, please reset the configuration file in settings. For...

CVE-2020-17519

Vulnerable Application This module exploits an unauthenticated directory traversal vulnerability in Apache Flink version 1.11.0 and released in 1.11.1 and 1.11.2 as well, allowing arbitrary file read with the web server privileges Vulnerable version: flink-1.11.0-src.tgz, Verification Steps 1...

CVE-2026-24849

CVE-2026-24849 OpenEMR Authenticated Arbitrary File Read EtherFax disposeDoc Tested on: OpenEMR Version = 7.0.2 Proof-of-concept exploit for CVE-2026-24849 , an authenticated path-traversal / arbitrary file read in OpenEMR's Fax/SMS EtherFax module. Any authenticated user regardless of privilege...

CVE-2025-27817

Disclaimer: The vulnerabilities and reproduction steps described in this document are for cybersecurity research and educational purposes only. No one may use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no liability for any...

CVE-2023-4698

CVE-2023-4698 Local File Inclusion LFI in usememos/memos 0.13.2 Description Today, I want to shine a spotlight on a significant discovery — a critical security vulnerability that has been identified in usememos/memos. This vulnerability, which falls under the category of Local File Inclusion LFI,...

CVE-2026-45504

CVE-2026-45504 Exchange File Read CVE-2026-45504 Exchange File Read Research Blog python3 CVE-2026-45504.py --attacker-ip 192.168.2.238 --attacker-port 9020 --creds [email protected] --password Hawktrace1 --target https://mail.exchange.local --target-file...

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability root@kitploit: USAGE: python3 CVE-2019-11510.py...