109646 matches found
EUVD-2026-93941
A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...
CVE-2026-106109 Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories
Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir before building without rejecting the project root, user home directory, filesystem roots, or symlink-resolved external...
CVE-2026-106109
The Quasar Framework 's @quasar/app-vite component (versions 1.0.0 through 3.3.0) contains a vulnerability where it recursively removes the build.distDir before building. The root cause is a lack of validation to reject sensitive paths such as the project root, user home directory, filesystem roo...
CVE-2026-95140
kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...
cve-2021-42013
Apache 2.4.50 - Path Traversal or Remote Code Execution cve-2021-42013.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.50. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-42013 If CGI-BIN is enabled...
CVE-2026-42048
CVE-2026-42048 CVE-2026-42048 Langflow Path Traversal / Arbitrary Directory Deletion PoC https://github.com/user-attachments/assets/6e5481ff-e953-47a5-8870-70b30c6550de Description CVE-2026-42048 : Langflow Arbitrary Directory Deletion Vulnerability description: A path traversal vulnerability in...
NewMachineAccount
NewMachineAccount 개요 NewMachineAccount.exe 는 지정된 도메인 내에서 사용자 지정 암호로 새 머신 계정을 생성하는 간단한 독립 실행형 exe 도구입니다. 사용법 NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac 매개변수 -dc : 사용할 도메인 컨트롤러를 지정합니다. -name : 생성할 머신 계정의 이름입니다. -domain : 머신 계정이 생성될 도메인입니다. -password : ...
sccmhound
SCCMHound SCCMHound는 Microsoft Configuration ManagerMCM용 C BloodHound 수집기입니다. Configuration Manager의 사용자와 컴퓨터에서 BloodHound 세션 정보를 수집할 방법을 찾고 있다면 바로 이 도구입니다! 다른 수집기SharpHound, SOAPHound 등의 데이터와 함께 수집된 데이터를 가져오는 것을 적극 권장합니다. 다른 데이터셋보다 먼저 또는 나중에 가져와도 상관없습니다. 이렇게 하면 Configuration Manager에서 수집한 정보로 보완...
certipy-merged
certipy-merged 이 저장소는 많은 오픈 풀 리퀘스트가 병합된 ly4k/Certipy의 포크로, 서로 호환되도록 만들고 어느 정도 테스트한 것입니다. 이 프로젝트는 작업 진행 중이므로 일부 기능이 예상대로 작동하지 않을 수 있으며 문제가 발생할 수도 있습니다. 설치 pipx 사용 권장 자동으로 관리되는 가상 환경의 편리함을 선호한다면 pipx를 사용하세요: pipx install git+https://github.com/zimedev/certipy-merged.git@main LDAP 채널 바인딩 지원이 필요하다면 패...
spydir
Usage: spydir.exe Monitor directory changes with all subdirectories For any files, including ones you have no access CVE-2007-0843 as on January, 2007 c Vladimir Dubrovin, 3APA3A http://securityvulns.com http://securityvulns.ru This approach is not reliable and should not be used for audit and...
CVE-2021-43798-Grafana-File-Read
Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-lastest reference: - https://github.com/tangxiaofeng7/Grafana-File-Read Exploit the Grafana /public/plugins endpoint's lax URL route validation vulnerability to read arbitrary local files from the server. poc:...
CVE-2019-14751_PoC
CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...
GrafTraverse-CVE-2021-43798
GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework Command-line automation tool for authorized security testing of Grafana Directory Traversal CVE-2021-43798. Overview CVE-2021-43798 is an unauthenticated directory traversal vulnerability in Grafana 8.x that allows attackers to read...
CVE-2019-16113
CVE-2019-16113 This is a python implementaiton PoC for the Bludit Directory Traversal Image File Upload Vulnerability CVE-2019-16113 Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg or .png file name, and then this PHP code...
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
Impact When generating an API plugin manifest from an attacker-controlled or compromised OpenAPI description, Kiota copies x-ai-capabilities.responsesemantics.oauthcardpath into the manifest without validating that it is a safe package-relative file reference. An attacker can supply...
CVE-2021-43798
CVE-2021-43798 Directory Traversal and Arbitrary File Read on Grafana Authors: Wagner Alves - Red Team Analyst This exploit leverages Directory Traversal and Arbitrary File Read vulnerabilities in Grafana 8.0 - 8.3, allowing it to read files such as /etc/passwd, /etc/hosts, /home/user/.ssh/idrsa,...
gopacket
gopacket Jacob Paullus @psycep 著 Impacket の完全な Go 実装 - Windows ネットワークプロトコル操作、Active Directory 列挙、攻撃実行のための 63 のツールと 24 のライブラリパッケージ。ネイティブ Go フレームワークとして構築されているため、一度コンパイルすれば Python 依存なしでどこでも実行できます。 ベータリリース - 非常に実験的。 gopacket は活発に開発中です。コアツールは Active Directory...
CVE-2021-4034
CVE-2021-4034 $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...
CVE-2026-105795
The Kiota OpenAPI-based HTTP Client code generator versions 1.25.1 through 1.35.0 are vulnerable to an improper limitation of pathnames (CWE-22 ). The software fails to validate the x-ai-capabilities.response_semantics.oauth_card_path value when copying it from an attacker-controlled or compromis...