Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

This repository does not have a README...

CVE-2020-10560-Key-Recovery

CVE-2020-10560 Key Recovery AES This PoC recovers the sitekey for OSSN 5.3 and above. For more information see http://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read...

CVE-2025-27817

Disclaimer: The vulnerabilities and reproduction steps described in this document are for cybersecurity research and educational purposes only. No one may use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no liability for any...

CVE-2024-36991

CVE-2024-36991 - Splunk Path Traversal Proof of Concept for CVE-2024-36991 which allows an attacker to read arbitrary files in Splunk for versions below to 9.2.2, 9.1.5, and 9.0.10 for Windows. Usage Read Splunk configuration files To read Splunk files just run the script passing the target URL...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from incorrect restrictions on the path name to the catalog, allowing attackers to read and write arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

CVE-2023-4698

CVE-2023-4698 Local File Inclusion LFI in usememos/memos 0.13.2 Description Today, I want to shine a spotlight on a significant discovery — a critical security vulnerability that has been identified in usememos/memos. This vulnerability, which falls under the category of Local File Inclusion LFI,...

CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability Installation git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Usage Vulnerable versions Adminer version 1.0 up to version 4.6.2 included File Rea...

uc_httpd_exploit

uc httpd exploit lighthttpd Simple uc httpd exploit made with py3.. this exploit was written from CVE-2014-2324 Description Multiple directory traversal vulnerabilities in 1 modevhost and 2 modsimplevhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. dot dot in...

checker-CVE-2020-5902

Checker CVE-2020-5902 Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface TMUI arbitrary file read and command execution vulnerabilities...

Poc_CVE-2025-68645

CVE-2025-68645 - Zimbra Path Traversal Vulnerability 📋 Overview CVE-2025-68645 is a path traversal vulnerability in Zimbra Collaboration Suite that allows unauthenticated attackers to read arbitrary files from the server's filesystem. Vulnerable Endpoint...

ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client. Affected Version CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit To exploit just load any file as SNX config using the -f paremeter. If the...

CVE-2024-20767

CVE-2024-20767 CVE-2024-20767 - Arbitrary file system read using an Improper Access Control vulnerability in Adobe ColdFusion Please refer to ma4ter blogpost for more information: Adobe ColdFusion任意文件读取漏洞CVE-2024-20767分析 Products and Versions affected: Product| Affected Versions ---|--- ColdFusio...

CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Vulnerability Lab & PoC Report Hands-on lab environment Vulnerable Lab and a detailed exploitation analysis report of the Ni8mare vulnerability chain on the n8n platform — from Arbitrary File Read CVE-2026-21858 to Remote Code Execution...

blind-xxe-controller-CVE-2021-29447

Blind XXE controller I make this controller on doing metatwo machine in HackTheBox to exploiting CVE-2021-29447 which Is a WordPress XXE Vulnerability in Media Library affected version 5.7, 5.6.2, 5.6.1, 5.6, 5.0.11. where an authenticated user with ability to upload media library can upload...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the LFI vulnerability on aiohttp 3.9.1. The option 'followsymlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'followsymlinks' is set to True, there is no validation to check if reading a file is with...

grafanaExp

grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. ➜ ./grafanaExp -h NAME: grafanaExp -...

CVE-2026-52886

Path Traversal: startswith Prefix Check Bypass Notepad++ — Arbitrary File Read viasession.xml backupFilePath Traversal Advisory GHSA: GHSA-rqfm-pw34-r7j6 CVE: CVE-2026-52886 Severity: Moderate Affected: v8.9.6.4 Patched: v8.9.7 Patch Commit: 7e66f36 Affected File: PowerEditor/src/Notepadplus.cpp...

CVE-2020-1938

CVE-2020-1938 The tool is only for security research and internal self-inspection. It is prohibited to use the tool to launch illegal attacks. The user is responsible for any consequences. apache-tomcat-8.5.32.zip test tomcat Arbitrary file read java -jar 1.jar...

exploit-grafana-CVE-2021-43798

CVE-2021-43798 – Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...