CVE-2025-30208-template

CVE-2025-30208-template CVE-2025-30208 vite file read nuclei template Query HUNTER : http://product.name="Vite" FOFA : body="/@vite/client" SHODAN ：http.html:"/@vite/client" Run Nuclei Template nuclei -l target.txt -t CVE-2025-30208.yaml...

CVE-2023-35844

CVE-2023-35844 Lightdash file read vulnerability CVE-2023-35844...

dirtyCow

Dirtycow also known as CVE-2016-5195 and it's very populer vulnerability of past time. First of all choose the fitted Linux version for that vulnerability. then install or run it on VBOX or VMWare . after install it follow those instructions. 1. Create a user without having root access. 2. Log in...

CVE-2024-39210

CVE ID CVE-2024-39210 PRODUCT Best house rental management system VERSION =1.0 PROBLEM TYPE Incorrect Access Control Description Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows...

CVE-2021-36749

CVE-2021-36749 Apache Druid LoadData Arbitrary File Read Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized attacks on websites are prohibited. Online reading of...

CVE-2025-58360-GeoServer-XXE

CVE-2025-58360: GeoServer XXE Lab Unauthenticated XML External Entity XXE Injection in GeoServer OWS/WMS Services CVSS: 9.8 CRITICAL Affected: SLDHandler.parse | | - SLDParser.parseSLD | File/SSRF Quick Start Start both vulnerab...

Metabase-cve-2021-41277

Metabase-cve-2021-41277 Metabase arbitrary file read optional arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use eg1:python3 Metabase-cve-2021-41277.py -u http://127.0.0.1 eg2:python3...

oob_entry

oobentry: Authorized iOS kernel exploit research for tfp0 access Visit releases: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip A calm, careful space for researchers to document, discuss, and share knowledge about iOS kernel concepts related to tfp0 access. This...

Jenkins-CVE-2024-23897-Lab

Jenkins CVE-2024-23897 Lab Arbitrary file read vulnerability in Jenkins 2.441 and earlier. Launch docker-compose up -d Automated Attack docker exec -it attacker-host ./auto-exploit.sh Manual Attack docker exec -it attacker-host bash cd /tmp curl -o jenkins-cli.jar...

CVE-2021-41278

CVE-2021-41277 Metabase arbitrary file read vulnerability batch scanning tool Affected versions: metabase version = 1.0.0, = 0.40.5 metabase version = 1.40.5 Usage usage: CVE-2021-41277.py -h -u URL -f FILE CVE-2021-41277 optional arguments: -h, --help show this help message and exit -u URL, --ur...

CVE-2024-24919---Poc

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read about it - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. Description Potentially allowing an...

TFTPlunder

TFTPlunder: an exploit for CVE-2023-29930 This is an exploit script for a blind file read / write vulnerability in the Genesys formerly InIn TFTP provisioning server. Vulnerability info This vulnerability is due to unrestricted configuration options for the TFTP root path and file extensions. In...

SUSE CVE-2026-98405

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parseposixsids In parseposixsids, sidsbufend is calculated using the server-supplied outlen without being validated against the actual length of the received iov iovlen. If a server...

CVE-2023-40924

BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: Attacker exploit the vulnerability through downloader.php? The file parameter reads sensitive files through the directory pass. downloader.php?file...

SUSE CVE-2026-105460

A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to...

Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

Microsoft Office PowerPoint Information Disclosure Vulnerability

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

Microsoft Office Word Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...