CVE-2024-24919-Sniper

CVE-2024-24919-Sniper 概要 CVE-2024-24919 Sniper は、Check Point Security Gateway の情報漏えい脆弱性をスキャンするために設計された Python スクリプトです。このスクリプトは、単一ターゲットと一括スキャンの両方に対応し、マルチスレッドを利用してスキャン速度を向上させます。ターゲットを指定し、スキャン動作を制御するためのさまざまなコマンドラインオプションをサポートしています。 特徴 CVE-2024-24919 脆弱性のスキャンおよび悪用 単一ターゲットおよび一括スキャンのサポート...

esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

auto-cve-2022-44268.sh

auto-cve-2022-44268 自动化利用 CVE-2022-44268 ImageMagick 任意文件读取漏洞 原始发现：https://www.metabaseq.com/imagemagick-zero-days/ PoC 仓库：https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC 描述 ImageMagick 会将 "profile" 文本字符串解释为文件名 ，并将内容加载 为原始 profile，然后攻击者可以下载 调整大小后的图像，该图像将包含远程文件的内容。...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 远程文件读取 此脚本演示了如何利用系统中使用 iconv 库时对字符编码转换处理不当的漏洞（如 CVE-2024-2961 所述）。它允许攻击者通过利用 PHP filter 链和有缺陷的编码处理来读取服务器上的任意文件。 该脚本自动化上传精心构造的有效载荷、获取结果文件并显示其内容的过程。它基于文章中详细描述的研究成果：Iconv CVE-2024-2961：利用字符编码转换 工作原理 脚本遵循以下步骤： 1. 有效载荷创建 创建一个 PHP filter 链有效载荷，利用 iconv...

CVE-2015-2166-EXPLOIT

CVE-2015-2166 - Ericsson Drutt Mobile Service Delivery Platform MSDP におけるディレクトリトラバーサルの脆弱性 CVE-2015-2166 は、Ericsson Drutt Mobile Service Delivery Platform MSDP バージョン 4、5、6 の Instance Monitor に影響を与えるディレクトリトラバーサルの脆弱性です。この脆弱性により、リモートの攻撃者は、デフォルトの URI において "..%2f" ドットドットエンコードされたスラッシュ...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Cisco ASA および FTD の未承認リモートファイル読み取り Nmap NSE スクリプト...

DEBIAN-CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2026-17615

CVE-2026-17615 is an XML External Entity (XXE) vulnerability in RESTEasy's SourceProvider component. The root cause is that SourceProvider.writeTo() creates a SAXParser without disabling external entity resolution. An unauthenticated attacker can exploit this by sending a specially crafted XML bo...

CVE-2026-17615 Resteasy-core: resteasy sourceprovider remote unauthenticated file read

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

EUVD-2026-68654

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

cosmicsting-cve-2024-34102-exploit

CosmicSting CVE-2024-34102 エクスプロイトスイート CVE-2024-34102 用の完全なエクスプロイトスイート - Adobe Commerce / Magento 2.4.x における CosmicSting XXE 脆弱性。 脆弱性の詳細 CVE : CVE-2024-34102 CVSS 9.8 タイプ : XML External Entity Injection XXE 影響 : 未認証のリモートファイル読み取り、SSRF、潜在的なRCE 影響を受けるバージョン : Adobe Commerce...

Linux Distros Unpatched Vulnerability : CVE-2026-17615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending ...

CVE-2026-56718

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service. An unauthenticated remote attacker can supply path traversal sequences in the HTTP request URI on port 80 to read arbitrary files with root privileges . Exposed data inclu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093616 advisory. a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled Th...

CVE-2026-73498

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:05+00:00| published-proof-of-concept| https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-g5r6-gv6m-f5jv 2026-08-12 23:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswacrdtft22...

EUVD-2026-57422

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-47754

CVE-2026-47754 affects Metacat 2.x (including 2.19.1) and all 1.x versions, with an unauthenticated path traversal in the archiveEntryName parameter of the action=read endpoint. The bug stems from ArchiveHandler.readArchiveEntry() concatenating user input into a filesystem path and a disabled has...

CVE-2026-72688 OpenSignLabs opensignserver - Missing Authentication for Critical Function

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...