shiro-cve-2010-3863

Apache Shiro path traversal CVE-2010-3863 Riproduzione della vulnerabilità Setup dell'ambiente locale con docker Apri yakit per catturare i pacchetti payload:/./admin/ Successo...

gxdlmsdirector-cve

Molteplici vulnerabilità in Gurux GXDLMS Director – esecuzione di codice remota Gurux GXDLMS Director è un programma Windows open-source per interagire con i contatori di energia tramite l'uso del protocollo DLMS/COSEM. Il software dispone di una funzionalità di aggiornamento remoto per le DLL...

cve-2022-41352

cve-2022-41352 genera poc.tar root@kitploit: $ chmod +x cpiopocgen.py $ ./cpiopocgen.py mostra il dito medio a cpio root@kitploit: $ cd /tmp $ mkdir -p poc/a/b copia poc.tar in /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ totale 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:56...

CVE-2024-32258

Panoramica ID CVE : CVE-2024-32258 Tipo : Attraversamento del percorso Fornitore : FCEUX Prodotti : FCEUXNetPlay Versione : 2.7.0 Correzione : 48b48e7c13be1b949074f42660a33c7ef57135e1 Descrizione FCEUX è un emulatore NES che può riportarci alla nostra infanzia. Offre diverse funzionalità...

POC_CVE-2025-69194

CVE-2025-69194: GNU Wget2 Path Traversal-Schwachstelle 📝 Beschreibung Proof of Concept für CVE-2025-69194 , eine kritische Path Traversal-Schwachstelle in GNU Wget2 = 2.2.0 verifiziert auf v1.99.1. Diese Schwachstelle erlaubt es Angreifern, durch die Bereitstellung einer bösartigen Metalink-Datei...

exploit-CVE-2019-14530

OpenEMR CVE-2019-14530 एक्सप्लॉइट OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2026-81845

A path traversal vulnerability in arben-adm mcp-sequential-thinking (up to version 0.5.0) affects the import_session/export_session functions in mcp_sequential_thinking/server.py. Manipulating the file_path argument allows an attacker to access files outside the intended directory. The attack can...

CVE-2026-81845 arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function importsession/exportsession of the file mcpsequentialthinking/server.py of the component Import Session/Export Session. Such manipulation of the argument filepath leads to path traversal. It ...

CVE-2021-43799

CVE-2021-43798 Grafana 8.x Pfad-Traversal Pre-Auth Alle Credits gehen an j0v und seinen Tweet https://twitter.com/j0v0x0/status/1466845212626542607 Haftungsausschluss Dies dient ausschließlich zu Bildungszwecken. Ich bin nicht verantwortlich für deine Handlungen. Verwende es auf eigenes Risiko. I...

CVE-2026-81837

A path traversal vulnerability affects RooCodeInc Roo-Code versions up to 3.51.1 , specifically in the path.resolve function within src/core/tools/ApplyPatchTool.ts . The flaw allows remote exploitation with low complexity and no required privileges, though user interaction is needed. A proof-of-...

CVE-2026-81837 RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal

A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the component ApplyPatchTool. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-36991

CVE-2024-36991 Template Nuclei Descrizione Questa repository contiene un template Nuclei per rilevare la vulnerabilità di path traversal in Splunk Enterprise su versioni Windows precedenti alle versioni 9.2.2, 9.1.5 e 9.0.10. La vulnerabilità consente l'accesso non autorizzato a file sensibili,...

CVE-2022-27925

CVE-2022-27925 Descrizione Il 10 maggio 2022, Zimbra ha rilasciato le versioni 9.0.0 patch 24 e 8.8.15 patch 31 per affrontare multiple vulnerabilità in Zimbra Collaboration Suite, incluse CVE-2022-27924 di cui abbiamo scritto in precedenza e CVE-2022-27925. Inizialmente, Zimbra ha definito...

diskwalker

Diskwalker un semplice script per attraversare il tuo disco e tenere traccia di insiemi interessanti di file Dopo aver ottenuto accesso a una macchina remota durante un penetration test, potresti voler trovare file di configurazione o binari interessanti per tentare un'elevazione dei privilegi. L...

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 erlaubt Directory-Traversal in der Website-Komponente Schwachstellentyp Directory Traversal Hersteller des Produkts Stakater Betroffene Produktcodebasis Forecastle = v1.0.144 Betroffene Komponente Betroffene Komponenten: URL -...

CVE-2025-30208-Vite

CVE-2025-30208 | Script Vite Esta ferramenta é usada para detectar se o sistema de destino possui a vulnerabilidade CVE-2025-30208. Essa vulnerabilidade permite que um atacante leia arquivos sensíveis no servidor por meio de caminhos específicos como /etc/passwd ou C:\windows\win.ini. A ferrament...

CVE-2024-57784

CVE-2024-57784 root@kitploit: Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional...

CVE-2021-43798

CVE-2021-43798 root@kitploit: ┌─✗─s1gh@parrot─/Desktop └──╼ $ python3 grafanapathtraversal.py -H "http://example-url:3000" Read file /etc/passwd root:x:0:0:root:/root:/bin/ash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin...

CVE-2016-10924

CVE-2016-10924 CVE-2016-10924 - Vulnerabilità di directory traversal nel plugin ebook-download di WordPress1.2. PoC + bruteforce del PID in Python. Utilizzo root@kitploit: git clone https://github.com/rvizx/CVE-2016-10924 cd CVE-2016-10924 python pidbrute.py...

CVE-2026-81838

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code awsdac in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third part...