CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...

Arbitrary-File-Read-CVE-2024-24919

Arbitrary File Read CVE-2024-24919 Here is the alert received on the SIEM Firstly, what is CVE-2024-24919? Here is the description on the NIST website. After some more research, CVE-2024-24919 is a path traversal attack, which explains the request being made to the '/etc/passwd' directory. The...

CVE-2020-11651

CVE-2020-11651 A script that exploits SaltStack CVE-2020-11651 and CVE-2020-11652 to add new users to a vulnerable Salt master by injecting entries into /etc/passwd and /etc/shadow. Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author: Jasper Lievisse...

CVE-2020-13886

PoC: https://youtu.be/nNKBRx8IglI ------------------------------------------------------------------------------------------------------------- ------------- 0day: TELEFONE IP TIP200/200 LITE & TIP 300 | Local File Include | ---------------------------- ------------------------------- P0c Author:...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. Overview of CVE-2019-15107 Webmin is a web-based interface for system administration for Unix. Using any web browser, you can set up user accounts, Apache, DNS, file sharing, and more. On August 10, 2019, Turkish cybersecurity researcher Özkan Mustafa Akkuş...

CVE-2024-24919

CVE-2024-24919 nuclei template of CVE-2024-24919 This template will help detect the described vulnerability by checking if the system leaks the contents of the /etc/shadow file...

CVE-2026-128329

Dokploy versions 0.28.0 before 0.31.1 are vulnerable to a path traversal vulnerability in the patch.readRepoFile function. Authenticated organization members with service read permissions can read arbitrary files by supplying ../ sequences in the filePath parameter. This flaw allows for the unaut...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 test program This remote command execution vulnerability in webmin, roughly caused by perl's qx/…/ leading to command execution, requires certain special conditions. During reproduction, I casually wrote a graphical exploit program. It is worth noting that the user...

cve-2021-45043

cve-2021-45043 HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter. initial post https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f exploiting via burp GET /language/lang HTTP/1.1 Host:...

CVE-2024-24919

Check point:CVE-2024-24919 run CVE nuclei -list chick.txt -t CVE-2024-24919.yaml Replace with the target IP address, and this command will attempt to access the /etc/shadow file, which contains password hashes. curl --path-as-is -i -s -k -X POST \ -H 'Host: 117.102.198.7 ' \ -H 'Content-Length: 3...

CVE-2020-25223

CVE-2020-25223 A PoC script for testing CVE-2020-25223 against an affected Sophos UTM. Given an IP address, the script attempts to download a copy of the devices /etc/shadow file. Original research: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

MegaHiDocker

MegaHiDocker This project will be exploited for some docker containers with similar vulnerability code: CVE-2020-35191, but this time on other containers. = Please read the Description.txt file Requirement: 1.Need to Install docker in your Linux AND Install subprocess module for python 3.X. 2.You...

CVE-2026-63644

bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bashhistory. This issue has been patched in version 1.4.7...

CVE-2026-63644 bird-lg-go: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') and Exposure of Sensitive Information to an Unauthorized Actor in github.com/xddxdd/bird-lg-go

bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bashhistory. This issue has been patched in version 1.4.7...

CVE-2026-63644 bird-lg-go: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') and Exposure of Sensitive Information to an Unauthorized Actor in github.com/xddxdd/bird-lg-go

bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bashhistory. This issue has been patched in version 1.4.7...

CVE-2026-63644

The bird-lg-go tool (a BIRD looking glass written in Go) is vulnerable to arbitrary local file read prior to version 1.4.7 . The root cause is unsanitized input paths , which allows an unauthenticated remote attacker to access sensitive files such as /etc/shadow and /root/.bash_history . This iss...

EUVD-2026-120457

bird-lg-go is a BIRD looking glass in Go. Prior to version 1.4.7, unsanitized input path enables arbitrary local file read, allowing an unauthenticated remote attacker to read sensitive files such as /etc/shadow and /root/.bashhistory. This issue has been patched in version 1.4.7...

CVE-2026-121689

FrodoBots EarthRover Mini+ firmware v6.2.46.2.50.614.0 exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpasupplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB...

CVE-2026-121689

The FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) contains multiple vulnerabilities allowing sensitive information disclosure. Specifically, the Wi-Fi PSK is stored in plaintext within wpa_supplicant.conf and can be accessed via unauthenticated API endpoints and diagnostic exports. F...

CVE-2026-121689 CVE-2026-121689

FrodoBots EarthRover Mini+ firmware v6.2.46.2.50.614.0 exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpasupplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB...