CVE-2020-10977

GitLab 비공개 인스턴스 임의 파일 읽기용 Python 익스플로잇 2020년 3월 23일, William Bowling 에 의해 취약점 보고서와 PoC가 HackerOne에 공개되었습니다. 이 취약점을 통해 gitlab 서버에서 /etc/passwd 등과 같은 모든 세계 읽기 가능 파일권한 444 이상을 읽을 수 있습니다. 오직 세계 읽기 가능 파일만 Notice that you should be authenticated user gitlab 버전 21.9.0 ubuntu 18.04에서 테스트했지만 OS에 독립적입니다...

CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN Pulse Secure Pulse Connect SecurePCS 8.28.2R12.1 이전, 8.38.3R7.1 이전, 9.09.0R3.4 이전에서 인증되지 않은 원격 공격자가 특수하게 조작된 URI를 전송하여 임의 파일 읽기 취약점을 악용할 수 있습니다. exploit.sh = 취약점 탐색. detect-pulse.sh = Pulse Secure를 실행 중인 IP 목록을 확인합니다. dr4x-wordlist.sh = 파일에 있는 여러 사이트를 대상으로 워드리스트 형태로만...

CVE-2026-85487

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...

Exploit for CVE-2026-21589

CVE-2026-21589 Atlassian DC Pre-Auth Arbitrary File Read,...

CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

Apache CXF XOP Include LFI CVE-2022-46364 Обзор Этот репозиторий содержит эксплойт Proof-of-Concept PoC для CVE-2022-46364 — уязвимости Local File Inclusion LFI в Apache CXF. Уязвимость возникает из-за некорректной обработки элементов XOP XML-binary Optimized Packaging Include в SOAP-запросах, чт...

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 Un outil de sécurité basé sur Python pour détecter et exploiter une vulnérabilité de lecture arbitraire de fichiers dans le plugin WordPress WP File Upload versions = 4.24.11...

CVE-2026-87667

Brocade Fabric OS versions prior to 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to an argument injection vulnerability within the configuration management command-line utility. The flaw occurs because the utility fails to sanitize user-supplied search string options when executing configura...

POC_CVE-2024-10829

POCCVE-2024-36420 Laboratoire de reproduction locale et brouillon de template nuclei pour CVE-2024-36420 affectant Flowise. Summary CVE-2024-36420 est une lecture arbitraire de fichier dans Flowise causée par l'utilisation non assainie du paramètre de corps fileName dans : POST...

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE Injection ⚠️ ПРЕДУПРЕЖДЕНИЕ ЭТОТ ИНСТРУМЕНТ ПРЕДНАЗНАЧЕН ИСКЛЮЧИТЕЛЬНО ДЛЯ ОБРАЗОВАТЕЛЬНЫХ И ИССЛЕДОВАТЕЛЬСКИХ ЦЕЛЕЙ Этот эксплойт предназначен исключительно для авторизованных операций красной команды, тестов на проникновение и исследований...

Apache Kafka Client - Arbitrary File Read

Apache Kafka Client contains arbitrary file read and server-side request forgery caused by untrusted configuration of sasl.oauthbearer.token.endpoint.url and sasl.oauthbearer.jwks.endpoint.url, letting attackers read files or send requests to unintended locations, exploit requires untrusted party...

PT-2026-107856

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated API request to the service endpoint bypassing path restrictions to arbitrary file read, file write, or file deletion...

GHSA-X3Q2-H9HX-4R4J Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...

EUVD-2026-92804

Docling has arbitrary file read/write and command execution when shell-escape is enabled when rendering untrusted TikZ with the opt-in Tectonic engine...

watchTowr-vs-Atlassian-CVE-2026-21589

CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read Detection in Action Detection Artifact Generator пытается проверить, уязвим ли целевой ресурс к CVE-2026-21589. Обнаружение реализовано для следующих продуктов: Atlassian...

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

GHSA-9GVV-QJJ3-2P6G Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

NPM: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

authenticated RCE and arbitrary file read via Chromium vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

NPM: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

authenticated RCE and arbitrary file read via Chromium vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

POC_CVE-2024-36420

POCCVE-2024-36420 Laboratoire de reproduction local et brouillon de template nuclei pour CVE-2024-36420 affectant Flowise. Résumé CVE-2024-36420 est une lecture arbitraire de fichiers dans Flowise causée par l'utilisation non nettoyée du paramètre body fileName dans : POST...

Exploit for CVE-2026-21589

CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read...