13926 matches found
westone-CVE-2021-21980-scanner
westone-CVE-2021-21980-scanner Las versiones anteriores de VMware vCenter 7.0.2.00100 tienen una vulnerabilidad de lectura de archivos arbitrarios no autorizada + SSRF + XSS Instalación y Uso git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2021-21980-scanne...
CVE-2026-22557-check
Herramienta de Evaluación de Vulnerabilidad CVE-2026-22557 Detecte de forma segura si un controlador UniFi Network Application es vulnerable a CVE-2026-22557 sin causar ninguna interrupción. Consulte el artículo completo en el blog de Bishop Fox. Descripción CVE-2026-22557 es una vulnerabilidad d...
ImageMagick-CVE-2022-44268-PoC
ImageMagick-CVE-2022-44268-PoC A bash script for easly exploiting ImageMagick Arbitrary File Read Vulnerability CVE-2022-44268 Image Magic version effected Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick Studio LLC License:...
CVE-2023-0157
ID de CVE : CVE-2023-0157 Tipo de Vulnerabilidad : Directory Traversal Descripción : El plugin All-In-One Security AIOS para WordPress es vulnerable a directory traversal en versiones hasta la 5.1.4 inclusive. Esto permite a atacantes autenticados con permisos de administrador leer el contenido d...
cve-2026-21858
CVE-2026-21858 + CVE-2025-68613 - Cadena Completa de n8n Lectura Arbitraria de Archivos sin Autenticación → Forja de Token de Admin → Bypass de Sandbox → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Crítico Afectado| = 0.211.0 RCE Corregido| 1.121.0 AFR / 1.120.4+ R...
CVE-2021-41277
CVE-2021-41277 MetaBase Vulnerabilidad de lectura arbitraria de archivos PoC masivo con fofa Declaración Este PoC se utiliza únicamente para detectar si el objetivo tiene la vulnerabilidad. Está estrictamente prohibido su uso para cualquier prueba no autorizada. El autor no asume ninguna...
Mini_httpd-CVE-2018-18778
minihttpd Vulnerabilidad de lectura de archivos arbitrarios CVE-2018-18778 Minihttpd es un servidor HTTP en miniatura que puede mantener un cierto nivel de rendimiento aproximadamente el 90% de Apache mientras ocupa pocos recursos del sistema, por lo que es ampliamente utilizado como servidor...
CVE-2025-24963
CVE-2025-24963 - Modo Navegador de Vitest - Lectura de Archivos Locales CVE-2025-24963 es una vulnerabilidad de severidad media puntuación CVSS 3.1: 5.9 que afecta al paquete @vitest/browser, un componente del marco de pruebas Vitest impulsado por Vite. Esta vulnerabilidad surge de una validación...
WordPress MPG plugin < 4.2.3 - Editor+ Arbitrary File Read vulnerability
Editor+ Arbitrary File Read vulnerability discovered by ieuns in WordPress Plugin MPG versions 4.2.3...
CVE-2024-23897
CVE-2024-23897 — Jenkins CLI Arbitrary File Read Quick Start 1. Start lab docker-compose up -d 2. Wait 30s, then download CLI tool curl -O http://localhost:8080/jnlpJars/jenkins-cli.jar 3. Exploit — read /etc/passwd full file java -jar jenkins-cli.jar -s http://localhost:8080 -http connect-node...
CVE-2026-85706
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read For authorized penetration testing and Red Team operations only. Unauthorized use constitutes a criminal offense. See Legal Notice. Overview CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability in GitLab Community and Enterprise...
CVE-2026-40000
CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...
CVE-2025-25163
CVE-2025-25163 Plugin A/B Image Optimizer = 3.3 - Descarga Arbitraria de Archivos Autenticada Suscriptor+ Descripción El plugin A/B Image Optimizer para WordPress es vulnerable a Directory Traversal en todas las versiones hasta la 3.3 inclusive. Esto permite a atacantes autenticados, con acceso d...
ROS-20261005-73-0015
The vulnerability of the Rsync file transfer and synchronization utility is related to the tracking of symbolic links in UNIX systems. Exploiting this vulnerability could allow an attacker to read arbitrary files...
Arbitrary file read via the convert_playwright_script prompt in mcp-k6
A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...
PT-2026-106247
Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...
The vulnerabilities of the get_absolute_path() and validate_absolute_path() methods in the Tornado asynchronous networking library allow attackers to read arbitrary files.
The vulnerability of the getabsolutepath and validateabsolutepath methods in the Tornado asynchronous networking library is related to incorrect definition of links before accessing files. Exploiting this vulnerability allows an attacker to read arbitrary files remotely...
CVE-2024-41628
CVE-2024-41628 Semplice script di exploit sviluppato da Redshift Cyber Security per sfruttare la vulnerabilità LFI CVE-2024-41628 di ClusterControl. La vulnerabilità interessa l'API CMON e in particolare le interfacce utente RPC e RPC-TLS che, per impostazione predefinita, risiedono rispettivamen...
Grafana-CVE-2024-9264
Grafana-CVE-2024-9264 POST /api/ds/query?dstype=expr&expression=true&requestId=Q100 HTTP/1.1 Host: 127.0.0.1:3000 Content-Type: application/json Cookie: grafanasession=a739fa9aeb235f2790f17de00fefe528 Content-Length: 368 "from": "1696154400000", "to": "1696345200000", "queries": "datasource":...
