ROOT-APP-PYPI-GHSA-9RJ7-RF2P-W77R GHSA-9rj7-rf2p-w77r in GitPython - Patched by Root

Root has patched GHSA-9rj7-rf2p-w77r in the GitPython package for Root:PyPI. Multiple fixed versions available...

cve-2025-65099

Prueba de Concepto para CVE-2025-65099 Más detalles se proporcionan en el artículo publicado. Técnica de yarnPath Un entorno vulnerable para yarnPath se puede inicializar de la siguiente manera: root@kitploit: docker run --rm -v "$PWD":/poc -it --workdir /poc ubuntu bash -c 'apt-get update -qq &&...

CVE-2026-76550

The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing export files, allowing users granted its export permission to write files with arbitrary names to arbitrary locations on the server, leading to remote code execution...

EUVD-2026-80175

The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing export files, allowing users granted its export permission to write files with arbitrary names to arbitrary locations on the server, leading to remote code execution...

CVE-2026-76550

The WP Import Export Lite WordPress plugin before 3.9.34 fails to validate a user-supplied output path when writing export files. This path traversal flaw allows any authenticated user granted the plugin's export permission to write files with arbitrary names to arbitrary locations on the server,...

CVE-2024-3912

¿Por qué? Lo publico porque Mirai es un grupo de gilipollas irritantes que no dejan de atacar mi honeypot con esto: no son el malware que estoy buscando. Lárguense, por favor. Aquí están su irritante IP de distribución de malware y su script de payload predeterminado...

CVE-2026-21440

CVE-2026-21440 PoC avanzado de solo detección para CVE-2026-21440 que afecta a AdonisJS BodyParser. No incluye explotación. CVE-2026-21440 – PoC de Detección Avanzada para AdonisJS Descripción Este proyecto proporciona un Proof of Concept PoC de solo detección avanzada para CVE-2026-21440 , una...

CVE-2021-32804

CVE-2021-32804 yamory blog 「CVE-2021-32804 npmにも影響があるnode-tarのパストラバーサルの脆弱性」 で利用したDocker環境の構築を行うためのレポジトリです。 环境搭建 root@kitploit: docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash 重现漏洞 node-tar root@kitploit: root@5e1af2148215:/poc node tar.js root@5e1af2148215:/poc su node...

Tomcat_PUT_GUI_EXP

TomcatPUTEXPV1.4 Tomcat PUT方法任意文件写入（CVE-2017-12615）图形化漏洞利用工具 漏洞介绍 2017年9月19日，Apache Tomcat官方确认并修复了两个高危漏洞，漏洞CVE编号:CVE-2017-12615和CVE-2017-12616,其中 远程代码执行漏洞（CVE-2017-12615） 影响： Apache Tomcat 7.0.0 - 7.0.79（7.0.81修复不完全） 当 Tomcat 运行在 Windows 主机上，且启用了 HTTP PUT 请求方法（例如，将 readonly 初始化参数由默认值设置为...

CVE-2026-23907

Vulnerabilidad de Path Traversal en Apache PDFBox Resumen de la Vulnerabilidad Descripción El código de ejemplo ExtractEmbeddedFiles de Apache PDFBox no sanitiza los nombres de archivo al extraer archivos incrustados de PDFs. Un atacante puede incrustar archivos con secuencias de path traversal ....

CVE-2024-50623

CVE-2024-50623 Cleo: PoC de carga y descarga de archivos sin restricciones CVE-2024-50623 Escritura arbitraria de archivos root@kitploit: python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ /...

gibbonlms-filewrite_rce

Gibbon LMS任意文件写入/远程代码执行 漏洞信息 Gibbon LMS中的任意文件写入导致远程代码执行（CVE-2023-45878） GibbonEdu Gibbon LMS...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Suricata-Update vulnerability (USN-8766-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8766-1 advisory. Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded...

CVE-2025-11395

Podman is affected by an arbitrary file write vulnerability that occurs when importing an OCI archive via the podman load command. An attacker who can supply a crafted tar archive to this command can create files on the host with the privileges of the user running Podman. The flaw is scored CVSS ...

CVE-2025-11395 Podman: arbitrary file write when importing oci archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

cve-2022-41352

cve-2022-41352 生成 poc.tar root@kitploit: $ chmod +x cpiopocgen.py $ ./cpiopocgen.py 对 cpio 竖中指 root@kitploit: $ cd /tmp $ mkdir -p poc/a/b copy poc.tar to /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ total 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:56 . drwxrwxr-x 3 xabino...

CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

CVE-2021-31800 - Servidor SMB de Impacket: lectura/escritura arbitraria de archivos Vector CVSS : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Puntuación CVSS : 9.9 Crítico Descripción Un path traversal en smbserver.py permite a un atacante leer/escribir archivos arbitrarios en el servidor...

CVE-2026-76687

HPE Networking EdgeConnect SD-WAN Orchestrator is affected by a vulnerability in its API endpoint involving an authenticated arbitrary file write that can lead to remote code execution . A low-privilege authenticated remote attacker can exploit this flaw to escalate privileges and execute arbitra...

CVE-2023-45878

CVE-2023-45878 GibbonEdu Gibbon 漏洞利用版本 25.0.1 GibbonEdu Gibbon 版本 25.0.1 及之前 GibbonEdu Gibbon 版本 25.0.1 及之前存在任意文件写入漏洞 更多信息 https://nvd.nist.gov/vuln/detail/CVE-2023-45878 https://herolab.usd.de/security-advisories/usd-2023-0025/ 免责声明...

CVE-2026-40058

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft...