CVE-2024-36991

CVE-2024-36991 POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file. Overview This is a bulk scanning and exploitation tool for CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. This vulnerability was...

Exploits_and_Advisories

Exploits and Advisories Repository that tracks public exploits, vulnerabilities and advisories that I co-discovered or co-authored. CVEs CVE| ID| Target| Description| Disclosure ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| DNS stack overflow| Pwn2Own Tokyo 2019...

CVE-2024-40422

CVE-2024-40422 Found this on exploit-db, decided to make my own for practice. This exploit will search out the passwd file and print the contents on a vulnerable system. This script exploits a path transversal vulnerability in Devika v1. Credit to Alperen Ergel for finding the vulnerability to...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC This is the Proof-of-concept exploit code for three vulnerabilities discovered by Jonas Mattsson and Hugo van den Toorn at Outpost24 Ghost Labs. These vulnerabilities are discovered in the web server component on a Pyrescom Termod4 time control machine. These vulnerabilities c...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro "...

CVE-2025-1661

CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...

CVE-2018-19859

CVE-2018-19859 - RCE Proof of Concept This repository contains a proof of concept for Remote Code Execution RCE against OpenRefine 3.1-beta. By exploiting a directory traversal vulnerability inside of the Create Project functionality, CVE-2018-19859, a malicious user can upload a custom Java...

CVE-2021-41773

CVE-2021-41773 Apache 2.4.49 Path Traversal Vulnerability Checker Example Platform Linux & Windows...

CVE-2020-25068

CVE-2020-25068 Python exploit for Conacwin v3.7.1.2. Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal...

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Overview On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition CE and Enterprise Edition EE. The release addresses CVE-2026-85706, a critical path traversal vulnerability CWE-22 in the repository commits API with a CVSSv3.1 score of 10.0. According to GitLa...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...

CVE-2021-3019

Usage and Disclaimer lanproxy Directory Traversal Vulnerability Batch Detection CVE-2021-3019 Usage: Python CVE-2021-3019.py url.txt In url.txt, each URL is on a separate line; vulnerable addresses are output to CVE-2021-3019.csv Affected Versions lanproxy 0.1 This tool is for security testing by...

CVE-2021-21234

CVE-2021-21234 Directory traversal vulnerability in the spring-boot-actuator-logview library https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

CVE-2023-35840

CVE-2023-35840 elFinder 2.1.62 - Path Traversal vulnerability in PHP LocalVolumeDriver connector Description Path Traversal vulnerability in PHP LocalVolumeDriver connector. This vulnerability can be exploited by allowing untrusted users to write to the local file system. Vulnerability exists in...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 is a vulnerability in Python’s tarfile module that allows arbitrary file writes outside the extraction directory when extracting untrusted tar archives. The issue occurs when using TarFile.extract or TarFile.extractall with filter="data" or filter="tar", which does...

CVE-2023-50164-Apache-Struts-RCE

CVE-2023-50164: Vulnerabilidad de path traversal a RCE en Apache Struts Se encontró una vulnerabilidad de seguridad crítica, identificada como CVE-2023-50164 CVE: 9.8, en Apache Struts, que permite a los atacantes manipular los parámetros de subida de archivos, lo que potencialmente puede conduci...

diskwalker

Diskwalker a simple script to walk your disk and keep track of interesting sets of files After gaining access to a remote machine during penetration testing, you might want to find interesting configuration files or binaries to attempt a privilege escalation. The script is self contained, and wor...

CVE-2021-40978

CVE-2021-40978 mkdocs 組み込み dev-server のディレクトリトラバーサル Mkdocs 1.2.2 では、ポート 8000 で応答する組み込み dev-server を介したディレクトリトラバーサルが可能です。 以下に、正常に悪用されたパスの例をいくつか示します。 影響 この手法を使用すると、ルートディレクトリ外のファイルを取得でき、誰でも任意のファイルを読み取り・ダウンロードできるようになります。 リクエスト: レスポンス: 概念実証 テンプレート:...

docker-lab-cve-2017-5638-cve-2021-41773

攻击者实验室：CVE-2017-5638 & CVE-2021-41773 一个基于Docker的7主机攻击模拟实验室，设计用于演示多阶段杀伤链、横向移动和多重IDS检测。 概述 本实验室模拟了一个真实的网络环境，攻击者从初始侦察开始，逐步建立立足点，最终通过跳板攻击高价值目标。它包含两个独立的Suricata IDS实例，作为关键主机的伴生容器，为整个攻击生命周期提供“防御者视角”。 杀伤链 1. 侦察 ：攻击者在 172.28.0.0/24 子网内执行网络扫描（ICMP、TCP SYN、HTTP 横幅抓取）。 2. 立足点（CVE-2017-5638） ：攻击者利用...

grafana-CVE-2021-43798

Grafana CVE Scan 21-43798 0.1 Scanner for Grafana Path Traversal Vulnerability found in CVE-2021-43798 Disclaimer: This is for Educational Purposes only! References for CVE: 1 - NIST CVE Details 2 - Grafana Notes Workarounds All installations between v8.0.0-beta1 and v8.3.0 should be upgraded as...