CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN In Pulse Secure Pulse Connect Secure PCS 8.2 prima di 8.2R12.1, 8.3 prima di 8.3R7.1 e 9.0 prima di 9.0R3.4, un attaccante remoto non autenticato può inviare un URI appositamente predisposto per sfruttare una vulnerabilità di lettura arbitraria di file. exploit.sh =...

CVE-2024-23897-Arbitrary-file-read

🤵🏻 CVE-2024-23897 Arbitrary-file-read 🤵🏻 Versioni interessate: Jenkins 2.441 e precedenti. Jenkins LTS 2.426.2 e precedenti. Uno script realizzato in Python per automatizzare la vulnerabilità CVE-2024-23897 🤖 🛠️ Questo codice Python presenta uno scanner per una vulnerabilità specifica...

Limesurvey-RCE

Limesurvey-RCE LimeSurvey RCE autenticato Prova di concetto: 1. Crea i tuoi file config.xml e i file della reverse shell php 2. Crea un archivio con questi file 3. Accedi con le credenziali 4. Vai su Configurazione - Plugin - Carica e installa 5. Scegli il tuo file zippato 6. Carica 7. Installa 8...

EUVD-2026-67182

ResourceCacheService.getCacheName builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new FileresourceParentFolder, newFileName before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 -...

CVE-2026-59294

Spring AI 's ResourceCacheService.getCacheName() builds an on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, before passing the result to new File(resourceParentFolder, newFileName). This allows an arbitrary file write via path traversal w...

CVE-2026-59294 Arbitrary File Write via Path Traversal in ResourceCacheService

ResourceCacheService.getCacheName builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the result to new FileresourceParentFolder, newFileName before writing the downloaded bytes there. Spring AI 2.0.0 Spring AI 1.1.0 -...

CVE-2026-59291

Spring Cloud Function versions 5.0.0–5.0.3, 4.3.0–4.3.4, and 4.2.0–4.2.7 are vulnerable to arbitrary file read and SSRF via the function that processes input data. An attacker can access arbitrary files or make unauthorized network requests by supplying crafted input that is improperly handled. T...

EUVD-2026-67179

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59291 Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-76219

A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the git read-tree command through methods like IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree, without proper option validation or...

exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana Exploit Über Dies ist ein Proof-of-Concept-Exploit für die Schwachstelle, die ein unbefugtes Lesen beliebiger Dateien in Grafana ermöglicht CVE-2021-43798. Diese Schwachstelle betrifft Grafana 8.0.0-beta1 to 8.3.0. Laut Shodan-Daten sind etwas mehr als 2.000 Grafana-Serve...

CVE-2026-76217

A flaw was found in GitPython where it fails to properly validate options provided to its git rm and git checkout commands. A remote attacker with low privileges could exploit this by supplying crafted parameters, such as --pathspec-from-file and --pathspec-file-nul. This vulnerability allows for...

CVE-2023-1177-PoC-reproduce

MLflow CVE-2023-1177 - PoC e Riproduzione Questo repository contiene il codice Proof-of-Concept PoC e le istruzioni per riprodurre la vulnerabilità Local File Inclusion LFI in MLflow, identificata come CVE-2023-1177. Informazioni sulla vulnerabilità: CVE ID: CVE-2023-1177 Tipo di vulnerabilità:...

libreoffice-convert vulnerable to path traversal / arbitrary file write

Impact options.fileName is used to build a filesystem path path.jointempDir.name, fileName and the caller-supplied document buffer is written there, but fileName is never reduced to a base name. A fileName containing "../" escapes the temporary directory, so a caller can write arbitrary content t...

NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write

NPM: libreoffice-convert vulnerable to path traversal / arbitrary file write vulnerability discovered by ? in WordPress Npm libreoffice-convert versions 1.8.2...

CVE-2026-54732 libreoffice-convert: path traversal / arbitrary file write

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2026-54732

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2 , the options.fileName value passed to path.join(tempDir.name, fileName) in index.js is never reduced to a base name. A filename containing ../ allows an attacker to escape the temporary d...

CVE-2026-54732 libreoffice-convert: path traversal / arbitrary file write

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

EUVD-2026-67161

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Strumento di exploit per la vulnerabilità di lettura arbitraria di file di Adminer 1.0 fino a 4.6.2 Installazione root@kitploit: git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Utilizzo...