9900 matches found
CVE-2026-112946
Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative browser URL in safeModulePaths instead of the cleaned resolved module identifier. On a network-accessible, non-Windows development server, an imported...
CVE-2026-112949
Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an unauthenticated non-browser WebSocket client that can reach a development server using interceptorPlugin can register a manual mock whose attacker-controlled url...
CVE-2026-112949
Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an unauthenticated non-browser WebSocket client that can reach a development server using interceptorPlugin can register a manual mock whose attacker-controlled url...
CVE-2026-112946
Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative browser URL in safeModulePaths instead of the cleaned resolved module identifier. On a network-accessible, non-Windows development server, an imported...
Vitejs-exploit
Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Muhammad Waseem. Usage: python viteexploit.py -u http://target.com python viteexploit.py...
CVE-2026-39363
CVE-2026-39363 Vite Dev Server WebSocket Arbitrary File Read Vulnerability Vulnerability Overview Attribute| Information ---|--- CVE ID| CVE-2026-39363 GHSA ID| GHSA-p9ff-h696-f583 Vulnerability Type| Arbitrary File Read Affected Component| Vite Dev Server Affected Versions| Vite = 6.2.3...
Rogue-Framework
Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...
CVE-2025-31486-Simulation
Vite Path Traversal Lab CVE-2025-31486 A hands-on, containerized lab environment to simulate and exploit the Path Traversal vulnerability in Vite's development server, identified as CVE-2025-31486. š About The Vulnerability This lab demonstrates a significant Path Traversal vulnerability found in...
CVE-2025-30208
š„ Vite Dev Server Vulnerability Scanner CVE-2025-30208 š Overview This tool scans for CVE-2025-30208, a vulnerability in the Vite Dev Server. It allows security researchers to quickly detect vulnerable instances using multiple payloads. ā” Features ā Single URL scanning -u URL ā Mass scanning from...
PT-2026-118431
Name of the Vulnerable Software and Affected Versions Vitest versions 2.1.0-beta.7 through 4.1.11 Vitest versions 5.0.0 through 5.0.2 Description An unauthenticated non-browser WebSocket client capable of reaching a development server using the interceptorPlugin can register a manual mock. The...
PT-2026-118428
Name of the Vulnerable Software and Affected Versions Vite versions prior to 6.4.4 Vite versions prior to 7.3.7 Vite versions prior to 8.1.6 Vite versions prior to 8.2.4 Vite versions prior to 8.3.3 Description Import analysis may record a root-relative browser URL in safeModulePaths instead of t...
CVE-2021-41773-Exploit-Lab
CVE-2021-41773 ā Exploit Development Lab Overview This project documents the research, reproduction, and Proof-of-Concept PoC development for CVE-2021-41773, a Path Traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability was reproduced in an isolated Docker laboratory...
cve-2024-3435
This is a Next.js project bootstrapped with create-next-app. Getting Started First, run the development server: npm run dev or yarn dev or pnpm dev or bun dev Open http://localhost:3000 with your browser to see the result. You can start editing the page by modifying app/page.tsx. The page...
CVE-2019-5420
CVE-2019-5420 A vulnerability can allow an attacker to guess the automatically generated development mode secret token. Ruby-on-Rails when it is running in development mode. In development mode, it is possible for an attacker to guess the key used to secure the sessions. Decryption: Key Generate:...
CVE-2022-22947-exp
CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...
Apache-Struts-2-CVE-2017-5638-Exploit-
Apache-Struts-2-CVE-2017-5638-Exploit This exploit exploits the Apache Struts2 vulnerability CVE-2017-5638, allowing us to execute commands remotely on the apache server How to use: $ sudo python Struts2Shell001.py ! Exploit Apache Struts2 DEMO Code of Rvbk + HOST con https Site with vulnerabilit...
AI_HACKING
AIHACKING Collection of CVEwork on tenserflow binary pwning it FOR CVE202223591WHICH IS STILL UNDER WORK I NEED TO FIGURE OUT HOW TO TURN BACK JSON TO PROTOBUF AND THAN DO with tf.io.gfile.GFile'test.pb', 'rb' as f: graphdef = tf.compat.v1.GraphDef print"aiciaaaaaaaaaaaaaa" printgraphdef...
CVE-2025-30208
š„ CVE-2025-30208 Vite Arbitrary File Read Vulnerability Scanner Advanced vulnerability scanner for CVE-2025-30208 with enterprise-grade features Professional penetration testing tool for Vite Arbitrary File Read vulnerability detection š Quick Start ā¢ š Features ā¢ š§ Usage ā¢ š Examples ā¢ š”ļø Securit...
ViteVulScan
ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...