CVE-2024-24919

Exploit per CVE-2024-24919 Descrizione Questo script Python è un exploit per CVE-2024-24919, una CVE che ha colpito i prodotti Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versioni: R77.20 EOL, R77.30 EOL, R80.10...

CVE-CVE-2025-25231

CVE-2025-25231 Nuclei Template Questo template è scritto per lo strumento Nuclei per identificare la vulnerabilità CVE-2025-25231 Path Traversal secondario nel prodotto Omnissa Workspace ONE UEM. Descrizione della vulnerabilità CVE-2025-25231 è una vulnerabilità di tipo Path Traversal che consent...

CVE-2024-46987

CVE-2024-46987: Path Traversal Automatizzato 📖 Panoramica Questo repository contiene un Proof of Concept PoC basato su Python per CVE-2024-46987. Questa vulnerabilità è un difetto di Path Traversal trovato nei moduli di download di file di alcuni ambienti CMS in particolare Camaleon CMS Versione...

CVE-2021-34429

CVE-2021-34429 POC per CVE-2021-34429 - Divulgazione di file sensibili di Eclipse Jetty 11.0.5 Utilizzo di URI codificati per accedere ai file all'interno della directory WEB-INF Configurazione dell'ambiente di test Prerequisiti: installazione di docker e docker-compose sul proprio sistema Per le...

CVE-2024-28995

CVE-2024-28995 PoC e Scanner Bulk Panoramica Questo repository contiene un proof-of-concept PoC e uno scanner bulk per la vulnerabilità di directory traversal SolarWinds Serv-U CVE-2024-28995. Questa vulnerabilità consente l'accesso non autorizzato per leggere file sensibili sulla macchina host. ...

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion è una piattaforma di sviluppo rapido per creare e distribuire applicazioni web e mobili. CVE-2024-20767 - Le versioni di ColdFusion 2023.6, 2021.12 e precedenti sono interessate da una vulnerabilità di Controllo degli Accessi Improprio che potrebbe...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2023-49979

CVE-2023-49979 Best Student Management System v1.0 - Controllo degli accessi errato - Elenco delle directory Descrizione : Una vulnerabilità di elenco delle directory in Best Student Management System v1.0 consente agli aggressori di elencare le directory e i file sensibili all'interno...

CVE-2023-49545

CVE-2023-49545 Customer Support System 1.0 - Elenco delle directory Descrizione : una vulnerabilità di elenco delle directory in Customer Support System v1 consente agli attaccanti di elencare directory e file sensibili all'interno dell'applicazione senza richiedere autenticazione/autorizzazione...

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

LimeSurvey 4.1.11 - Local File Inclusion

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. id: CVE-2020-11455 info: name: LimeSurvey 4.1.11 - Local File Inclusion author: daffainfo severity: critical...

Commvault CommCell - Local File Inclusion

CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13 are vulnerable to local file inclusion because an attacker can view a log file can instead view a file outside of the log-files folder. id: CVE-2020-25780 info: name: Commvault...

CMSimple 3.1 - Local File Inclusion

CMSimple 3.1 is susceptible to local file inclusion via cmsimple/cms.php when registerglobals is enabled which allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including...

XWiki - Information Disclosure

XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused by exposed context allowing static access to files in webapp/ folder, letting attackers access sensitive files, exploit requires use of XJetty package. id: CVE-2025-55749 info: name:...

Clustering Local File Inclusion

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access. id: CVE-2021-43496 inf...

Joomla! Component Highslide 1.5 - Local File Inclusion

A directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1314 info: name: Joomla! Component Highslide 1.5 - Local File Inclusion...

Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion

A directory traversal vulnerability in the J!WHMCS Integrator comjwhmcs component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1977 info: name: Joomla! Component J!WHMCS Integrator 1.5.0 - Local File...

Traggo Server - Local File Inclusion

traggo/server version 0.3.0 is vulnerable to directory traversal. id: CVE-2023-34843 info: name: Traggo Server - Local File Inclusion author: DhiyaneshDk severity: high description: | traggo/server version 0.3.0 is vulnerable to directory traversal. impact: | Successful exploitation of this...

Chuanhu Chat - Directory Traversal

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...

Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion

A directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1953 info: name: Joomla! Component iNetLanka Multiple Map 1.0 - Local Fil...