nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

CVE-2023-49545

CVE-2023-49545 Customer Support System 1.0 - 디렉터리 목록 설명 : Customer Support System v1의 디렉터리 목록 취약점으로 인해 공격자가 인증/권한 부여 없이 애플리케이션 내의 디렉터리와 민감한 파일을 나열할 수 있습니다. 취약한 제품 버전 : Customer Support System 1.0 CVE 작성자 : Geraldo Alcântara 날짜 : 28/11/2023 확인일 : 19/12/2023 CVE : CVE-2023-49545 테스트 환경 : Windows 재현...

CVE-2024-28995

CVE-2024-28995 PoC 및 대량 스캐너 개요 이 저장소는 SolarWinds Serv-U CVE-2024-28995 디렉터리 트래버설 취약점에 대한 개념 증명PoC 및 대량 스캐너를 포함합니다. 이 취약점은 호스트 머신에서 민감한 파일을 무단으로 읽을 수 있게 합니다. 이 취약점은 Hussein Daher가 발견하여 보고했습니다. 기능 단일 대상 스캔 : 단일 URL에서 CVE-2024-28995 취약점을 스캔합니다. 대량 스캔 : 파일에서 여러 URL을 읽어 CVE-2024-28995 취약점을 스캔합니다. 멀티스레...

CVE-2023-49979

CVE-2023-49979 Best Student Management System v1.0 - 부적절한 접근 제어 - 디렉터리 목록 설명 : Best Student Management System v1.0의 디렉터리 목록 취약점으로 인해 공격자가 인증/권한 없이 애플리케이션 내의 디렉터리와 민감한 파일을 열람할 수 있습니다. 취약한 제품 버전 : Best Student Management System v1.0 CVE 작성자 : Geraldo Alcântara 날짜 : 2023-11-28 확인일 : 2023-12-19 CVE :...

Clustering Local File Inclusion

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access. id: CVE-2021-43496 inf...

Pallets Werkzeug <0.15.5 - Local File Inclusion

Pallets Werkzeug before 0.15.5 is susceptible to local file inclusion because SharedDataMiddleware mishandles drive names such as C: in Windows pathnames. id: CVE-2019-14322 info: name: Pallets Werkzeug 0.15.5 - Local File Inclusion author: madrobot severity: high description: | Pallets Werkzeug...

VMware - Local File Inclusion

VMware Workspace ONE Access, Identity Manager, and Realize Automation are vulnerable to local file inclusion because they contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access withou...

Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion

A directory traversal vulnerability in the Realtyna Translator comrealtyna component 1.0.15 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-2682 info: name: Joomla!...

WordPress Ninja Job Board < 1.3.3 - Direct Request

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. id: CVE-2022-2544...

CVE-2021-34429

CVE-2021-34429 CVE-2021-34429에 대한 PoC - Eclipse Jetty 11.0.5 민감한 파일 노출 인코딩된 URI를 사용하여 WEB-INF 디렉터리 내 파일 접근 테스트 환경 설정 전제 조건: 시스템에 Docker와 docker-compose 설치 Debian 기반 배포판예: Ubuntu, Kali Linux 등의 경우 다음 명령어를 사용하세요 apt install docker.io apt install docker-compose Windows, Mac 및 기타 배포판의 경우 다음 가이드를 참조하세...

CVE-2024-46987

CVE-2024-46987: 자동화된 경로 탐색 Path Traversal 📖 개요 이 저장소는 CVE-2024-46987 에 대한 Python 기반 개념 증명PoC을 포함합니다. 이 취약점은 특정 CMS 환경특히 Camaleon CMS 버전 2.9.0의 파일 다운로드 모듈에서 발견된 경로 탐색Path Traversal 결함입니다. 이 스크립트는 일반적인 경로 정규화를 우회하여 민감한 시스템 파일예: /etc/passwd 또는 SSH 개인 키을 자동으로 검색합니다. 🛠️ 기술적 세부 사항 취약점은 애플리케이션이 file 매개변수...

Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion

A directory traversal vulnerability in the J!WHMCS Integrator comjwhmcs component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1977 info: name: Joomla! Component J!WHMCS Integrator 1.5.0 - Local File...

Joomla! Component Highslide 1.5 - Local File Inclusion

A directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1314 info: name: Joomla! Component Highslide 1.5 - Local File Inclusion...

Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion

A directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1953 info: name: Joomla! Component iNetLanka Multiple Map 1.0 - Local Fil...

XWiki - Information Disclosure

XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused by exposed context allowing static access to files in webapp/ folder, letting attackers access sensitive files, exploit requires use of XJetty package. id: CVE-2025-55749 info: name:...

qdPM 9.2 - Directory Traversal

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. id: CVE-2023-45855 info: name: qdPM 9.2 - Directory Traversal author: DhiyaneshDk severity: high description: | qdPM 9.2 allows Directory Traversal to list files and directories by navigating to t...

Chuanhu Chat - Directory Traversal

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...

Traggo Server - Local File Inclusion

traggo/server version 0.3.0 is vulnerable to directory traversal. id: CVE-2023-34843 info: name: Traggo Server - Local File Inclusion author: DhiyaneshDk severity: high description: | traggo/server version 0.3.0 is vulnerable to directory traversal. impact: | Successful exploitation of this...

Joomla! Harmis Messenger 1.2.2 - Local File Inclusion

Joomla! Harmis Messenger 1.2.2 is vulnerable to local file inclusion which could give an attacker read access to arbitrary files. id: CVE-2019-9922 info: name: Joomla! Harmis Messenger 1.2.2 - Local File Inclusion author: 0xAkoko severity: high description: Joomla! Harmis Messenger 1.2.2 is...

Commvault CommCell - Local File Inclusion

CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13 are vulnerable to local file inclusion because an attacker can view a log file can instead view a file outside of the log-files folder. id: CVE-2020-25780 info: name: Commvault...