49556 matches found
CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD
COMJOOMANAGER 2.0 -ARBITRARY FILE DOWNLOAD Collecting databases in mass with plugin : COMJOOMANAGER, From CMS: Joomla, Project developed in python 2.x, more information, access the youtube video. CVE: 2017-18345 Risk : Security Risk High 0day.Today-ID: 29950 ExploitDB-id: 44252 0day db-id:...
CVE-2026-43637-cornac
CVE-2026-43637: Path Traversal Tar Slip in Cornac via extractarchive Severity: High, CVSS 4.0 8.8 , Critical, CVSS 3.1 9.1assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N Vector v4.0: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected:...
CVE-2026-56291
Auto Scanning Version & Exploit CVE-2026-56291 POC Joomla Unauthenticated Arbitrary File Upload leading to RCE in Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...
CVE-2020-26259
CVE-2020-26259 CVE-2020-26259: XStream1.4.14 is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights. https://x-stream.github.io/CVE-2020-26259.html XStream 1.4.14 pom.xml root@kitploit: com.thoughtworks.xstream xstre...
CVE-2019-11510_poc
CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability root@kitploit: USAGE: python3 CVE-2019-11510.py...
CVE-2024-34470
CVE-2024-34470 Description: An Unauthenticated user can abuse Path Traversal vulnerability exists in the /public/loader.php file. The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an attacker to read arbitrary files on the server...
CVE-2022-0847
CVE-2022-0847 my personal poc and exploit of CVE-2022-0847dirty pipe Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: root@kitploit: $ gcc poc.c -o poc -static You shall run it as follow: root@kitploit: ./poc targetfile offsetinfile data You shal...
CVE-2025-46822
CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path Description: While Path.resolve method is being used to protect against path traversal I have found that the usage of absolute path successfully read internal files , the endpoint is also not authenticated this means anyone can...
CVE-2020-10560
CVE-2020-10560 CVE-2020-10560 OSSN Arbitrary File Read For details on how to use this repository refer to https://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read Starting docker-compose up --build Installing Once the images are running, you can access the install page at 127.0.0.1 or...
CVE-2018-14847
CVE-2018-14847 This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and upda...
CVE-2026-74239
XenForo before 2.3.13 is affected by a path traversal vulnerability in the style archive importer on Windows deployments. Authenticated non-super administrators with style permissions can exploit backslash-based traversal sequences in ZIP member names to bypass forward-slash validation, writing a...
EUVD-2026-72759
XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...
CVE-2026-0740
CVE-2026-0740 Ninja Forms File Uploads = 3.3.26 - Unauthenticated Arbitrary File Upload to RCE Exploit for CVE-2026-0740 discovered by Selim Lanouar whattheslime. For a complete technical deep dive, read the full article on Lexfo's blog. Disclaimer This repository is provided for research and...
CVE-2018-3760
CVE-2018-3760 Rails Asset Pipeline Directory Traversal Vulnerability Found by Orange Tsai Note : By default, Rails apps running in production mode are not vulnerable to this exploit. Exploit: root@kitploit: curl -v...
CVE-2020-5902_RCE
CVE-2020-5902RCEEXP Blog: http://www.svenbeast.com/post/cve-2020-5902 Read File Example: https://x.x.x.x/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd root@kitploit: GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1 Host: 127.0.0.1 Connection:...
CVE-2024-23773
CVE-2024-23773 - Arbitrary File Delete Vulnerability Information will follow in due course...
CVE-2021-30357_CheckPoint_SNX_VPN_PoC
CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client. Affected Version CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit To exploit just load any file as SNX config using the -f paremeter. If the...
CVE-2023-21752
CVE-2023-21752 PoC para la vulnerabilidad de eliminación arbitraria de archivos en el servicio de Backup de Windows. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 Este repositorio contiene dos exploits: v1 - Simplemente realiza la eliminación del archivo elegido por el...
CVE-2026-0740-mass
CVE-2026-0740 — Mass-Target Exploit Engine Author: 0xNuts Contributor: Cursor Repository: https://github.com/ExDev994/CVE-2026-0740-mass PoC for CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 — Unauthenticated Arbitrary File Upload which can lead to RCE. Original vulnerability discovered by Sél...