Cisco-ASA-FTD-Web-Services-Traversal

Vulnerabilidad de Recorrido de Directorios en los Servicios Web del Software Cisco Adaptive Security Appliance y Firepower Threat Defense CVE-2020-3452 Uso: CVE-2020-3452.py https://target Descripción de la vulnerabilidad: Una vulnerabilidad en la interfaz de servicios web del software Cisco...

CVE-2024-28995

CVE-2024-28995 PoC SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. Queries Shodan: product:"Rhinosoft Serv-U httpd" "Serv-U FTP Server" Fofa: app="SolarWinds-Serv-U-FTP" References...

CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U 存在目录遍历漏洞，允许读取主机上的敏感文件。 安装 git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt 用法 扫描单个目标 python3 CVE-2024-28995.py -t domain.com 扫描域名列表 python3 CVE-2024-28995.py -f domains.txt 分析...

CVE-2024-24919-Exploit

CVE-2024-24919-Exploit Resumen Este repositorio contiene un exploit en Python para el CVE-2024-24919, una vulnerabilidad que permite leer archivos sensibles de la página vulnerable. Este exploit primero verifica si el objetivo es vulnerable, y luego obtiene la ruta que especifiques. Severidad :...

CVE-2023-40924

BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: Attacker exploit the vulnerability through downloader.php? The file parameter reads sensitive files through the directory pass. downloader.php?file...

CVE-2024-36991

CVE-2024-36991 Windows 上 Splunk Enterprise 版本低于 9.2.2、9.1.5 和 9.0.10 中的路径遍历漏洞，允许读取敏感文件。...

ApacheSkywalking

ApacheSkywalking Inyección SQL de Apache SkyWalking para leer archivos sensibles...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

EUVD-2026-72910

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

PT-2026-78521

Name of the Vulnerable Software and Affected Versions Cisco BroadWorks affected versions not specified Description An issue in the Open Client Interface OCI XML Parser allows an unauthenticated remote attacker to read sensitive configuration information. This occurs because the parser improperly...

CVE-2021-47942: Improper Limitation of a Pathname to a Restricted Directory

Home Assistant Community Store HACS prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint. Attackers can retrieve the .storage/auth file containing user credentials and refresh...

CVE-2025-14610

CVE-2025-14610 : The WordPress plugin TableMaster for Elementor (versions up to and including 1.3.6) is vulnerable to authenticated SSRF via the csv_url parameter in the Data Table widget. An attacker with Author-level access or higher can trigger web requests to arbitrary locations (including lo...

PT-2026-2346

Warning: Multiple High Severity Vulnerabilities in React-Router. CVE-2025-61686, CVE-2026-22029, CVE-2026-59057 & others. Attackers can read sensitive files or hijack sessions! Patch Patch Patch More info: https://t.co/jRGNAD4XZZ...

EUVD-2019-2261

Malware in sbrugna...

EUVD-2024-46425

Malicious code in bioql PyPI...

CVE-2025-53097: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's searchfiles tool did not respect the setting to disable reads outside of the VS Code workspace. This means that an attacker who was able to inject a prompt into the agent coul...

CVE-2024-5178

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability i...

CVE-2020-35580

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBl...

VulnCheck KEV: CVE-2024-5178

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability i...

CVE-2024-5178

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability i...