CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client. Affected Version CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit To exploit just load any file as SNX config using the -f paremeter. If the...

CVE-2023-21752

CVE-2023-21752 PoC para la vulnerabilidad de eliminación arbitraria de archivos en el servicio de Backup de Windows. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 Este repositorio contiene dos exploits: v1 - Simplemente realiza la eliminación del archivo elegido por el...

CVE-2026-0740-mass

CVE-2026-0740 — Mass-Target Exploit Engine Author: 0xNuts Contributor: Cursor Repository: https://github.com/ExDev994/CVE-2026-0740-mass PoC for CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 — Unauthenticated Arbitrary File Upload which can lead to RCE. Original vulnerability discovered by Sél...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic unauthorized access leading to arbitrary file upload/RCE vulnerability check script...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 jenkins-cli We have seen Jenkins File Leak / RCE CVE-2024-23897 exploited in the wild and managed to reproduce it. If your Jenkins allows anonymous users or user registration, immediately update it to the latest version. java -jar jenkins-cli.jar -s...

auto-cve-2022-44268.sh

auto-cve-2022-44268 Automating exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read Original finding: https://www.metabaseq.com/imagemagick-zero-days/ PoC Repository: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC Description ImageMagick will interpret the...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips arbitrary file read → conditional remote code execution RCE PoC tool. Single-file, Python 3.11+ pure standard library with zero dependencies , includes MAT/HDF5 hybrid payloads, a pure-Python PNG pixel decoder, offset reads,...

CVE-2019-1253

CVE-2019-1253 AppXSvc Arbitrary File Security Descriptor Overwrite EoP I have independently reported this vulnerability to MSRC, however, my submission turned out to be a duplicate due to the fact that the fix for CVE-2019-1253 also addressed this issue. My PoC differs from the ones created by...

CVE-2026-48939

CVE-2026-48939 — iCagenda Joomla RCE Exploit Pre-Auth Arbitrary File Upload → PHP Code Execution Overview CVE-2026-48939 is a CVSS 10.0 critical vulnerability in the iCagenda events calendar extension for Joomla. The frontend event registration form's file attachment feature enforces access...

CVE-2024-24919

Mass Auto Scanner for CVE-2024-24919 This script is designed to scan a list of URLs for the CVE-2024-24919 vulnerability on remote Check Point firewalls. It attempts to exploit the vulnerability by sending a malicious POST request to extract specified files from the target servers. Running the...

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

CVE-2022-44268 ImageMagick Arbitrary File Read PoC PoC for CVE-2022-44268 ImageMagick Arbitrary File Read PoC - Payload generator This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any...

CVE-2024-34693

CVE-2024-34693 Exploit This repository contains a sophisticated Python script to exploit the CVE-2024-34693 vulnerability in Apache Superset. The script sets up a rogue MySQL server and creates a malicious MariaDB connection to exfiltrate the content of a specified file from the target system...

ATutor-Instructor-Backup-Arbitrary-File

ATutor - Exploit de copia de seguridad del instructor Título del exploit: ATutor 2.2.4 'Backup' - Ejecución remota de comandos CVE-2019-12170 Google Dork: inurl:/ATutor/login.php Fecha: 5/13/2019 Autor del exploit: liquidsky Joseph McPeters Página oficial del proveedor: https://atutor.github.io/...

CVE-2015-3337

CVE-2015-3337 CVE-2015-3337 Arbitrary File Read http://10.10.20.166:9200/plugin/head/../../../../../../../../../etc/passwd Usage: python CVE-2015-3337.py root@kitploit: python CVE-2015-3337.py / \ | | | | / | |/ | | | | || || || / | / / | | | | ' / /'| |/' || | | \ / / / / / / / / | | | | | | ||...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the LFI vulnerability on aiohttp 3.9.1. The option 'followsymlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'followsymlinks' is set to True, there is no validation to check if reading a file is with...

CVE-2020-14008

CVE-2020-14008 - ManageEngine Applications Manager RCE Authenticated Remote Code Execution via Arbitrary File Upload in Zoho ManageEngine Applications Manager versions = 14720. Vulnerability Summary...

CVE-2020-17519

CVE-2020-17519 Apache Flink RESTful API Arbitrary File Read Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and...

two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal

CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download Handler Proof-of-concept for CVE-2026-18907 CVSS 7.5 High, CWE-23, a relative path-traversal vulnerability in the download file feature of TECNO Hi Browser com.talpa.hibrowser version 2.23.1.1. The browser trusted an attacker-controlled...

CVE-2021-39433

CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Drag and Drop Multiple File Upload for Contact Form 7 Description: Arbitrary file uploads via drag‑and‑drop‑multiple‑file‑upload-contact‑form‑7 ≤1.3.8.9 allow upload of .phar files, leading to remote code execution in Apache+modphp :contentReferenceoaicite:29index=29...