CVE-2026-36227

CVE-2026-36227: PoC de traversée de chemin UserName dans Easy Chat Server 3.1 Ce dépôt contient une preuve de concept bénigne pour CVE-2026-36227, un problème de traversée de chemin dans la gestion des inscriptions utilisateur d'Easy Chat Server 3.1. Ce dépôt est destiné uniquement à la recherche...

Multi-threaded-mass-exploiter-CVE-2018-13379-POC

CVE-2018-13379 — Mass Exploit for Fortinet FortiOS SSL VPN A tool for mass exploitation of the CVE-2018-13379 path traversal vulnerability in Fortinet FortiOS SSL VPN. Allows reading session files and extracting logins and passwords in cleartext. Features Exploitation of CVE-2018-13379 via the...

cve-2024-38819-lab

Лаборатория Customer Vault для CVE-2024-38819 Это демонстрационное приложение Spring Boot, готовое для Cloud Foundry, для CVE-2024-38819 — уязвимости обхода пути в функциональной обработке статических ресурсов Spring Framework. Что исправлено? CVE-2024-38819 исправлена в Spring Framework , а не...

CVE-2025-8088-Winrar

CVE-2025-8088 WinRAR Exploitation Advanced WinRAR Path Traversal Exploitation Tool A sophisticated GUI tool for creating malicious RAR files that exploit the WinRAR path traversal vulnerability CVE-2025-8088 by manipulating ADS and RAR5 headers. Features ADS Exploitation - NTFS alternate data...

CVE-2026-5203

CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple ≤ 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator to upload arbitrary files e.g. PHP web shells...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal & Arbitrary File Write Authenticated This repository contains a Proof of Concept PoC exploit for CVE-2026-6815, an arbitrary file write and path traversal vulnerability in Casdoor. The vulnerability has been fixed in version 3.54.1...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

acl: Symlink traversal privilege escalation via libacl functions

A flaw was found in the acl package, specifically within its libacl pathname-based functions. A local attacker could exploit this vulnerability by using a symbolic link to replace a pathname component. This could allow the attacker to redirect access control list ACL read or write operations to...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2019-19781-Checker

CVE-2019-19781-Checker Check your website for CVE-2019-19781 Vulnerable VISIT https://citrix-checker.com TO CHECK IF YOU ARE VULNERABLE FOR CVE-2019-19781 PLEASE USE OUR CHECKER TWO TIMES TO BE SURE This website gives you the results if your service is vulnerable for CVE-2019-19781. There is a...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read...

My-Exploits

My-Exploits Vulnerability research I have done on four widely deployed platform services: Keycloak, Apache NiFi, HashiCorp Vault and HashiCorp Nomad. For each finding this repo carries the write-once artifacts I actually use, a Metasploit module where it made sense, a standalone Python proof of...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Chaîne d'exploitation proof-of-concept que j'ai découverte, assignée sous CVE-2026-47301 pour Microsoft Configuration Manager SCCM, combinant un contrôle d'accès défaillant, une écriture arbitraire de fichier par traversée de chemin lors de...

CVE-2026-53519-PoC

CVE-2026-53519 — Nezha Dashboard Path Traversal & JWT Forgery English | 繁體中文 | 简体中文 This repository contains a Proof-of-Concept PoC exploit for a vulnerability in the Nezha Dashboard that allows unauthenticated path traversal , leading to disclosure of sensitive files including jwtsecretkey and...

cve-2021-41773

CVE-2021-41773 – Apache Path Traversal Report Summary Vulnerability found in Apache HTTP Server 2.4.49 that can expose sensitive files on the system through a Path Traversal attack depending on the web server configuration Path Traversal: An attacker can access files outside the web root using...

CVE-2022-21371

CVE-2022-21371 Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Локальное включение файлов root@kitploit: Exploit Title: Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion Date: 25/1/2022 Exploit Author: Jonah Tan @picar0jsu Vendo...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — Inclusion de fichier local dans PrivateBin via un parcours de chemin dans le cookie template Sévérité : Moyenne CVSS v3.1 : 5.8 Vecteur : AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Versions affectées : PrivateBin = 1.7.7 Version corrigée : 2.0.3 CWE : CWE-23 Relative Path Traversal,...

CVE-2025-32462

CVE-2025-32462 – Script POC pour sudo Il s'agit d'un script de détection d'escalade de privilèges CVE‑2025‑32462 , offrant deux modes : la détection directe via sudo et la détection de traversée par utilisateur non privilégié. Structure des fichiers Fichier| Description ---|--- poc.sh| Fichier de...