Lucene search
+L

373 matches found

Kitploit
Kitploit
added 2026/09/04 1:11 p.m.5 views

CVE-2025-30208

CVE-2025-30208 Using a special raw import query string on a vite dev server, a attacker can read arbitrary files Summary of the CVE Vite dev servers before 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 can bypass the server.fs.deny file access checks for @fs requests. Appending ?raw?? or ?import&raw??...

7.5CVSS6.7AI score0.74969EPSS
SaveExploits28References1
Kitploit
Kitploit
added 2026/09/04 8:37 a.m.3 views

CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

7.5CVSS6.7AI score0.74969EPSS
SaveExploits32References5
Kitploit
Kitploit
added 2026/09/04 4:52 a.m.4 views

CVE-2025-30208

🔥 CVE-2025-30208 Vite Arbitrary File Read Vulnerability Scanner Advanced vulnerability scanner for CVE-2025-30208 with enterprise-grade features Professional penetration testing tool for Vite Arbitrary File Read vulnerability detection 🚀 Quick Start • 📋 Features • 🔧 Usage • 📊 Examples • 🛡️ Securit...

7.5CVSS6.7AI score0.74969EPSS
SaveExploits28References1
Kitploit
Kitploit
added 2026/09/04 4:23 a.m.3 views

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Vulnerability Overview CVE-2025-30208, CVE-2025-31125 and CVE-2025-31486 are arbitrary file reading vulnerabilities in the Vite development server. These vulnerabilities allow an attacker to bypass access controls through specific URL parameters...

7.5CVSS6.5AI score0.74969EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/04 3:42 a.m.2 views

CVE-2025-30208-31125-31486-32395

Vite Vulnerability Exploitation Guide CVE-2025-30208/31125/31486/32395 This document summarizes exploitation methods for four arbitrary file read vulnerabilities in the Vite development server, including examples for Linux and Windows systems. Note: For use only in authorized security testing...

7.5CVSS5.9AI score0.74969EPSS
SaveExploits29
Nuclei
Nuclei
added 2026/09/04 2:04 a.m.87 views

Vite server.fs.deny Bypass - Local File Inclusion

Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By adding ?.svg with ?.wasm?init or with sec-fetch-dest- script header, the server.fs.deny restriction was able to bypass. This bypass is only possible if the file is smaller than...

5.3CVSS6.8AI score0.40175EPSS
SaveExploits7References5
Nuclei
Nuclei
added 2026/09/04 2:04 a.m.66 views

Vite - Path Traversal

Vite versions prior to 6.2.6, 6.1.5, 6.0.15, 5.4.18, and 4.5.13 contain a file exposure vulnerability caused by improper handling of request URLs with '' in the dev server running on Node or Bun, letting attackers access arbitrary files, exploit requires the server to be exposed to the network an...

6CVSS6.6AI score0.01725EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/09/04 2:04 a.m.120 views

Vite Dev Server - Path Traversal in Optimized Deps .map Handling

Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePathpath.resolveroot, url.slice1 and call...

6.3CVSS5.9AI score0.00914EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/04 2:04 a.m.86 views

Vite Dev Server - Information Exposure

Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network using...

6CVSS6AI score0.01157EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/03 9:36 p.m.5 views

CVE-2025-30208-EXP

CVE-2025-30208-EXP Vite 개발 서버 임의 파일 읽기 취약점CVE-2025-30208으로, 영향 범위가 넓고 이용이 간단하며 제한이 없어 그 피해가 매우 큽니다! Fofa 검색 문구: root@kitploit: body="/@vite/client" 鹰图Hunter 검색 문구: root@kitploit: web.body="/@vite/client" Exp 스크립트 사용 방법 root@kitploit: -u 进行检测 root@kitploit: -p 自定义payload eg. /etc/passwd...

7.5CVSS6.7AI score0.74969EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/03 3:03 p.m.3 views

CVE-2025-30208-template

CVE-2025-30208-template CVE-2025-30208 Vite ファイル読み取り Nuclei テンプレート クエリ HUNTER : http://product.name="Vite" FOFA : body="/@vite/client" SHODAN :http.html:"/@vite/client" Nuclei テンプレートの実行 root@kitploit: nuclei -l target.txt -t CVE-2025-30208.yaml...

7.5CVSS6.6AI score0.74969EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/03 1:04 a.m.5 views

CVE-2026-39363

CVE-2026-39363 — Detección masiva de lectura arbitraria de archivos en Vite Dev Server WebSocket Descargo de responsabilidad: Esta herramienta está destinada únicamente a pruebas de seguridad autorizadas e investigación educativa. Los usuarios deben cumplir con las leyes y regulaciones locales;...

8.2CVSS4.5AI score0.03396EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 2:15 a.m.5 views

CVE-2025-11953-PoC

Description The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and r...

9.8CVSS8.2AI score0.9398EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 3:22 p.m.4 views

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server 任意文件读取 PoC 针对 GHSA-p9ff-h696-f583 的可直接运行 PoC。通过未鉴权的 HMR WebSocket 调用 fetchModule,绕过 HTTP 层的 server.fs.allow 限制,读取 dev server 所在机器上的任意文件。 影响范围 版本线| 受影响| 已修复 ---|---|--- Vite 6| =6.0.0, =7.0.0, =8.0.0, → 403)。 2. 但 HMR WebSocket 的握手只校验: Sec-WebSocket-Protocol:...

8.2CVSS4.5AI score0.03396EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 5:16 a.m.7 views

CVE-2025-30208

CVE-2025-30208 — Vite Arbitrary File Read · v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Severity: CVSS 5.3 Medium network-accessible dev server ⚠ For authorized security engagements only. Unauthorized use against systems you do not own or have explicit written permission to test is illegal...

7.5CVSS6.3AI score0.74969EPSS
SaveExploits28References1
Kitploit
Kitploit
added 2026/08/31 3:32 a.m.5 views

CVE-2025-30208-PoC

CVE-2025-30208 - Vite Arbitrary File Read PoC This is a Proof-of-Concept PoC script to exploit CVE-2025-30208, allowing arbitrary file reads on Vite development servers. Vulnerability Details Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2,...

7.5CVSS6.4AI score0.74969EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/08/29 5:27 p.m.3 views

CVE-2025-30208

🔥 Scanner di Vulnerabilità del Server di Sviluppo Vite CVE-2025-30208 🚀 Panoramica Questo strumento scansiona per CVE-2025-30208, una vulnerabilità nel Server di Sviluppo Vite. Permette ai ricercatori di sicurezza di rilevare rapidamente istanze vulnerabili utilizzando multipli payload. ⚡...

7.5CVSS6.6AI score0.74969EPSS
SaveExploits28References1
OSV
OSV
added 2026/08/21 1:00 p.m.25 views

ROOT-APP-NPM-CVE-2026-6402 CVE-2026-6402 in webpack-dev-server - Patched by Root

Root has patched CVE-2026-6402 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...

6.5CVSS5.2AI score0.00291EPSS
SaveExploits2
OSV
OSV
added 2026/08/21 1:00 p.m.25 views

ROOT-APP-NPM-CVE-2025-30359 CVE-2025-30359 in webpack-dev-server - Patched by Root

Root has patched CVE-2025-30359 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...

5.9CVSS4.4AI score0.00548EPSS
SaveExploits1
OSV
OSV
added 2026/08/21 1:00 p.m.19 views

ROOT-APP-NPM-CVE-2026-9595 CVE-2026-9595 in webpack-dev-server - Patched by Root

Root has patched CVE-2026-9595 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...

5.3CVSS5.2AI score0.00163EPSS
SaveExploits0
Rows per page
Query Builder