CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

CVE-2026-52680_exploit

CVE-2026-52680 — Apache Kyuubi REST Batch Path-Traversal Arbitrary File Write Unauthenticated arbitrary file write in Apache Kyuubi's REST API via the multipart batch-submission endpoint. POST /api/v1/batches multipart/form-data writes the resourceFile part to $KYUUBIHOME/work/upload// using the...

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE Arbitrary File Read - Full System Compromise . Not Testeted yet... will test them this week...

eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...

CVE-2026-86995

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote...

CVE-2021-42362

CVE-2021-42362 The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the /src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be...

Arbitrary-File-Read-CVE-2024-24919

Arbitrary File Read CVE-2024-24919 Here is the alert received on the SIEM Firstly, what is CVE-2024-24919? Here is the description on the NIST website. After some more research, CVE-2024-24919 is a path traversal attack, which explains the request being made to the '/etc/passwd' directory. The...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code Execution RCE Product BiggiDroid – Simple PHP Blog CMS Product page: https://biggidroid.com/product/simple-php-blog/ Vulnerability Type Arbitrary File Upload Unrestricted File Upload Remote Code Execution RCE Severity Critical CVSS...

CVE-2025-65346

CVE-2025-65346 – Authenticated Path Traversal From UnZip Function Leading to Arbitrary File Write in laravel-file-manager v3.3.1 🧭 Overview A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem...

day03-jenkins-23897

Day 3 — Jenkins CLI arbitrary file read CVE-2024-23897 Idea: Jenkins ≤ 2.441 LTS ≤ 2.426.2 expands @/path inside CLI args. Unauthenticated users can make Jenkins read local files and reflect their first lines via the CLI help output. Fixed in 2.442 / 2.426.3. Build → Run root@kitploit: 1 Build...

CVE-2025-30208-Vite

CVE-2025-30208 | Vite Script This tool is used to detect whether the target system has the CVE-2025-30208 vulnerability. This vulnerability allows an attacker to read sensitive files such as /etc/passwd or C:\windows\win.ini from the server via a specific path. The tool supports single URL...

CVE-2020-17518

CVE-2020-17518 Apache Flink RESTful API Arbitrary File Upload via Directory Traversal Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A REST handler which was introduced in Apache...

CVE-2024-57785

CVE-2024-57785 root@kitploit: Exploit Title: Authenticated File Inclusion Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57785 Usage: CVE-2024-57785.py -h -u URL -f FILE optional...

CVE-2024-57784

CVE-2024-57784 root@kitploit: Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional...

CVE-2021-43798

CVE-2021-43798 root@kitploit: ┌─✗─s1gh@parrot─/Desktop └──╼ $ python3 grafanapathtraversal.py -H "http://example-url:3000" Read file /etc/passwd root:x:0:0:root:/root:/bin/ash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability CVE-2020-1938 with advanced features for penetration testing and security research. 🔍 Overview The Ghostcat vulnerability CVE-2020-1938 allows attackers to read arbitrary files fr...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generador de Contenido e Imágenes = 1.7.7 - Autenticado Editor+ Subida Arbitraria de Archivos El complemento S2B AI Assistant de WordPress versiones 2.47 y anteriores contiene una vulnerabilidad de subida arbitraria de archivos que permite a usuarios...

ulteriusExploit

ulteriusExploit Python exploit for CVE-2017-16806 Ulterius Server 1.9.5.0 directory traversal Arbitrary File Access exploit By Rick Osgood CVE-2017-16806...

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 A Python-based security tool to detect and exploit an arbitrary file read vulnerability in the WordPress WP File Upload plugin versions = 4.24.11...

CVE-2024-25641-Exploit-for-Cacti-1.2.26

Exploit CVE-2024-25641 para Cacti 1.2.26 Explotando CVE-2024-25641 en Cacti 1.2.26. Cuando un usuario está autenticado, una vulnerabilidad de escritura arbitraria de archivos permite la Ejecución Remota de Código RCE. Resumen Este script automatiza el proceso de explotación de CVE-2024-25641 en...