CVE-2021-41579-LCDS-LAquis-SCADA-4.3.1.1085-Arbitrary-File-Write

LAquis SCADA 임의 파일 쓰기 👨‍💻 작성자 Mohammed Idrees Banyamer 🐦 Instagram: @banyamersecurity CVE-2021-41579에 대한 개념 증명 익스플로잇 - LCDS LAquis SCADA ≤ 4.3.1.1085 에서 악성 .els 프로젝트 파일을 통한 임의 파일 쓰기 🚨 취약점 설명 CVE-2021-41579 는 LCDS LAquis SCADA 버전 ≤ 4.3.1.1085에서 발생하는 클라이언트 측 취약점입니다. 공격자는 경로 탐색 시퀀스......\를 포함한 악성...

CVE-2026-67206

CVE-2026-67206 - Wolf CMS = 0.8.3.1 - RCE via Arbitrary File Write This repo contains a Proof of ConceptPoC exploit for CVE-2026-67206 Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own or have...

CVE-2022-30333

A proof of concept for CVE-2022-30333 - a path traversal vulnerability in unRAR versions prior to 6.11. I created this as a demonstration of the exploit for an AttackerKB writeup, and hope to incorporate it in a Metasploit Module soon! Basically, you provide a target including path traversal and...

CVE-2025-47273-PoC

CVE-2025-47273: setuptools version 78.1.0 - Path Traversal in setuptools.packageindex Disclaimer This Proof of Concept PoC is intended for educational purposes and authorized security auditing only. The author assumes no responsibility for misuse of this information. Unauthorized access to comput...

CVE-2023-45878

CVE-2023-45878 CVE-2023-45878 GibbonEdu Arbitrary File Write...

EventLogin-CVE-2025-29969

EventLogin - CVE-2025-29969 EventLogin is a Time-of-check time-of-use vulnerability in the MS-EVEN protocol. The vulnerability enables low-privileged users to write arbitrary files to a remote machine, effectively bypassing the need for an Administrator account for a remote write. There are two...

CVE-2025-4138-POC

CVE-2025-4138 - Python tarfile PATHMAX Bypass PoC Author: d3vn0mi root@kitploit: / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Overview A...

CVE-2021-33564

CVE-2021-33564 PoC Эксплойт для CVE-2021-33564 внедрение аргументов в Ruby Gem Dragonfly. Использование Произвольное чтение файла python3 poc.py -u https:///system/refinery/images -r /etc/passwd Произвольная запись файла python3 poc.py -u https:///system/refinery/images -w public/test.txt -c...

CVE-2025-4138-poc

CVE-2025-4138 Auto-Sudo Generator A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517 Path Traversal via PATHMAX Truncation. Successfully exploiting this vulnerability allows an attacker to bypass tarfile extraction filters and write arbitrary files to...

logrotten

!WARNING This repository has been moved to https://codeberg.org/whotwagner/logrotten. Please visit the new location for the latest updates. Winning a race condition in logrotate to elevate privileges Brief description logrotate is prone to a race condition after renaming the logfile. If logrotate...

CVE-2025-48384-POC

To trigger, do git clone --recursive https://github.com/fishyyh/CVE-2025-48384-POC.git on a vulnerable git version and you'll find a /tmp/sectest file suddenly appearing...

PoC-CVE-2019-10743

Zip Slip Demo This project demonstrates the Zip Slip vulnerability CVE-2019-10743 using the vulnerable version of the mholt/archiver package. What is Zip Slip? Zip Slip is vulnerability that was uncovered by the security researchers from Snyk. It was found that the vulnerability is impacting...

CVE-2023-29343

CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...

proxylogscan

proxylogscan This tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin CVE-2021-26855. By chaining this bug with another post-auth arbitrary-file-write vulnerability to get code execution...

halo-2.25.4-backup-write-CVE-2026-67920

Уязвимость произвольной записи файлов при восстановлении резервной копии Halo CMS Краткое описание Критическая уязвимость произвольной записи файлов существует в функциональности восстановления резервных копий Halo CMS версий до 2.25.4. Метод restoreWorkdir в MigrationServiceImpl.java копирует...

CVE-2022-30333-PoC

CVE-2022-30333-POC Пример файла для тестирования CVE-2022-30333 Sample.rar : если вы хотите протестировать на Linux. При распаковке он создает trav в ../../tmp/traversed. Убедитесь, что каталог ../../tmp/traversed существует перед извлечением Sample.rar exp.rar : если вы хотите протестировать на...

bl_sbx

blsbx itunesstored & bookassetd Sandbox Escape This repository contains a proof-of-concept demonstrating how maliciously crafted downloads.28.sqlitedb and BLDatabaseManager.sqlite databases can escape the sandbox of itunesstored and bookassetd on iOS. By abusing their download mechanisms, the POC...

CVE-2026-58073-check

Veeam Service Provider Console — Имитация агента: скрипт обнаружения состояния патчей Безопасный детектор без аутентификации для уязвимостей KB4893 в Veeam Service Provider Console опубликовано 2026-08-04. Он отвечает на один вопрос по каждой цели, до любой аутентификации или TLS: присутствуют ли...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

CVE-2026-35492

CVE-2026-35492 CVE-2026-35492PartitionedDataset의 경로 탐색 취약점으로 인한 임의 파일 쓰기 가능 영향 kedro-datasets의 PartitionedDataset은 경로 탐색에 취약했습니다. 파티션 ID가 검증 없이 데이터셋 기본 경로에 직접 연결되었습니다. 파티션 ID에 .. 구성 요소가 포함된 공격자 또는 악의적인 입력으로 인해 구성된 데이터셋 디렉터리 외부에 파일이 기록될 수 있으며, 잠재적으로 파일 시스템의 임의 파일을 덮어쓸 수 있습니다. 로컬 파일 시스템, S3, GCS 등 ...