CVE-2023-2825-PoC

CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...

CVE-2024-36991

CVE 2024-36991 A path-traversal vulnerability that allows an attacker to read files from the system. Technical Summary CVE : 2024-36991 Path Traversal Affected Systems : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 Legal Disclaimer This tool is provided for authorized security assessments only...

CVE-2021-41773

CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate and understand the vulnerability CVE-2021-41773 , present in Apache HTTP Server 2.4.49. The flaw reside...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction of CVE-2021-41773 , a path traversal vulnerability in Apache HTTP Server 2.4.49. This project uses Docker to create an isolated vulnerable environment and a Python PoC to demonstrate controlled file disclosure. Safety: The PoC only accep...

Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-

Incident Response Report: TeamCity Compromise CVE-2024-27198 Analyst: Belal Abdelsalam Date: July 2026 Lab/Environment: CyberDefenders JetBrains 📄 Executive Summary This report documents the forensic analysis of a compromised JetBrains TeamCity server version 2023.11.3. By analyzing the provided...

cve-2021-42013-httpd

Dockerisation of a Vulnerability: cve-2021-42013 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Apache HTTP Server 2.4.50 - Remote Code...

cve-2021-41773

Cve-2021-41773-grabber Vulnerabilidad de path traversal y divulgación de archivos en Apache HTTP Server 2.4.49 Este script obtiene servidores vulnerables para cve 2021-41773 desde shodan Cómo usar : usa python 3 instala el módulo shodan: pip install shodan cambia la palabra clave en el script por...

CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the filename. root@kitploit: POST...

path-traversal-CVE-2026-14628

Path Traversal Demo - Case Study : CVE-2026-14628 A minimal, runnable demonstration fo the Path TraversalCWE-22 vulnerability class, usicng the recently dislosed CVE-2026-14628 as a real-world reference point. The real vulnerability CVE-2026-14628 affects 'NousResearch/hermes-agent' 2026.5.16. Th...

GrafanaDirectoryScanner

PoC for CVE-2021-43798 Grafana is an open-source platform for monitoring and observability. Grafana versions from 8.0.0-beta1 to 8.3.0 except patched versions are vulnerable to directory traversal, allowing access to local files. The vulnerable URL is: /public/plugins//, where is the plugin ID fo...

navgix

navgix navgix es una herramienta en golang multihebra que verificará vulnerabilidades de alias traversal en nginx Técnicas Actualmente, navgix soporta 2 técnicas para encontrar directorios vulnerables o alias de ubicación. Estas son las siguientes: Heurística navgix realizará una solicitud GET...

CVE-2026-17495

A flaw was found in moment, a JavaScript library for handling dates. A remote attacker could exploit this vulnerability by providing a specially crafted input to the moment.locale function. This input, which is not a standard text string, can bypass security checks designed to prevent unauthorize...

CVE-2026-17495

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...

CVE-2021-43798

CVE-2021-43798 1. Summary Grafana is an open-source platform that supports data monitoring and management. In the versions listed below, a Path Traversal vulnerability exists that allows manipulation of file paths using special characters such as ../. 8.0.0 and above, below 8.0.7 8.1.0 and above,...

CVE-2025-31486-Simulation

Vite Path Traversal Lab CVE-2025-31486 A hands-on, containerized lab environment to simulate and exploit the Path Traversal vulnerability in Vite's development server, identified as CVE-2025-31486. 📖 About The Vulnerability This lab demonstrates a significant Path Traversal vulnerability found in...

CVE-2021-43798

CVE-2021-43798 - Grafana Arbitrary File Read Python toolkit for authorized testing of CVE-2021-43798, a Grafana path traversal vulnerability that can allow unauthenticated arbitrary file reads through plugin asset paths. This repository contains: grafanapoc.py: interactive arbitrary file read PoC...

CVE-2025-4517-tarfile-PATH_MAX-bypass

CVE-2025-4517 / CVE-2025-4330 — Python tarfile Data Filter Bypass via PATHMAX Overflow Author: 0xDTC CVEs: CVE-2025-4517 / CVE-2025-4330 Advisory: GHSA-6r6c-684h-9j7p CPython Fix: PR 135037 Overview Python's tarfile.extractallfilter="data" is supposed to safely extract tar archives by preventing...

FUXAPWN

CVE-2026-25895 — FUXA = 1.2.9 Unauthenticated Path Traversal to Remote Code Execution Unauthenticated, pre-auth arbitrary file write against FUXA, a Node.js-based SCADA/HMI platform. Chains to remote code execution via several distinct post-write primitives. Works even when secureEnabled = true...

CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...

CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...