Mini_httpd-CVE-2018-18778

minihttpd Arbitrary File Read Vulnerability CVE-2018-18778 Minihttpd is a miniature HTTP server that can maintain a certain level of performance about 90% of Apache while occupying minimal system resources. Therefore, it is widely used as an embedded server in various IoT devices routers, switche...

CVE-2019-12086-jackson-databind-file-read

jackson-CVE-2019-12086 Vulnerability Description When Default Typing is enabled, and the classpath contains mysql-connector-java version 8.0.15 released on 2019.2.1 or earlier, an attacker can read arbitrary files by sending malicious JSON data. The mysql-connector-java library is the commonly us...

cve-2014-0521

CVE-2014-0521 Adobe Reader vulnerability This JavaScript based Adobe Reader vulnerability affects all versions of Adobe Reader on all platforms prior to version 11.0.07 released on May 13, 2014. The bug was found by Gábor Molnár and was reported on March 10, 2014. Advisories: CVE-2014-0521 Adobe...

CVE-2024-4956

CVE-2024-4956 Quick and easy exploitation of CVE-2024-4956 for LFI based on original PoC from: VeryLazyTech, https://github.com/verylazytech/CVE-2024-4956. This implementation takes 2 arguments, url and file, and presents the output of the file if it is found...

CVE-2025-13796-PoC

CVE-2025-13796-PoC deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery PoC : root@kitploit: curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 is a high-severity path traversal vulnerability CVSS 3.1 score: 7.5 affecting Grafana versions 8.0.0-beta1 through 8.3.0. It allows unauthenticated attackers to read arbitrary files from the server by exploiting improper sanitization in the /public/plugins/:pluginId...

CVE-2025-31131

CVE-2025-31131 - YesWiki 4.5.2 Path Traversal Exploit This is an unauthenticated path traversal exploit targeting YesWiki versions prior to 4.5.2. The vulnerability exists in the squelette parameter, which allows reading arbitrary files from the server. Vulnerability Details CVE-ID: CVE-2025-3113...

CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner

Escaneo multihilo en Python2 de la vulnerabilidad de lectura de archivos del protocolo Tomcat-Ajp Beneficio para cazadores de SRC PoC obtenido de https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi/, ¡¡¡¡el autor del PoC no soy yo!!!! Operación 1. Colocar los dominios/IP a escanear en ip.txt...

CVE-2024-9047-Exploit

CVE-2024-9047: Exploit for WordPress File Upload Plugin Description The WordPress File Upload plugin for WordPress is vulnerable to a Path Traversal vulnerability in all versions up to, and including, 4.24.11 via the wfufiledownloader.php file. This vulnerability allows unauthenticated attackers ...

PoC-Fix-jenkins-rce_CVE-2024-23897

PoC-jenkins-rceCVE-2024-23897. On this git you can find all information on the CVE-2024-23897. Introduction The issue, assigned the CVE identifier CVE-2024-23897, has been described as an arbitrary file read vulnerability through the built-in command line interface. This command parser has a...

exploit-CVE-2023-27564

Exploit for CVE-2023-27564 This vulnerability allows anonymous file read in n8n. root@kitploit: import requests url = "https://example.com/rest/data/filesystem:..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd:.svg" response = requests.geturl printresponse.statuscode printresponse.headers...

CVE-2018-3760

CVE-2018-3760 Vulnerabilidad de Directory Traversal en el Asset Pipeline de Rails Descubierto por Orange Tsai Nota : De forma predeterminada, las aplicaciones Rails que se ejecutan en modo producción no son vulnerables a este exploit. Exploit: root@kitploit: curl -v...

CVE-2024-36991

Splunk Path Traversal Exploit CVE-2024-36991 Description This is a Proof-of-Concept PoC exploit script for CVE-2024-36991 , a path traversal vulnerability affecting Splunk Enterprise on Windows versions below: 9.2.2 9.1.5 9.0.10 The vulnerability allows unauthenticated attackers to access sensiti...

CVE-2021-41773

Vulnerable docker images for CVE-2021-41773 Apache path traversal This vulnerabiltiy only applies to version 2.4.49 that have specific non-default configs. In certain situations this can result in either file read or code execution. https://twitter.com/ptswarm/status/1445376079548624899 Vulnerabl...

CVE_2024_42007

CVE-2024-42007 - php-spx Path Traversal Exploit This repository contains a Python 3 proof-of-concept PoC script for CVE-2024-42007. Vulnerability Summary: php-spx = 0.4.15 suffers from a path traversal vulnerability via the SPXUIURI parameter, allowing unauthenticated attackers to read arbitrary...

CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2025-14611 CentreStack and Triofox full Poc/Exploit Summary This vulnerability arises from hardcoded cryptographic keys in Gladinet CentreStack and Triofox products, enabling arbitrary file read through forged access tickets. The AES-256 encryption implementation uses static, unchanging keys...

CVE-2019-20085

📂 CVE-2019-20085 – TVT NVMS-1000 Directory Traversal Exploit By Z3R0 Author: Z3R0 CVE: CVE-2019-20085 Target: TVT NVMS-1000 all known versions prior to patch Vuln Type: Unauthenticated Directory Traversal Date: Insert Your Release Date 🔍 Vulnerability Summary TVT's NVMS-1000 software contains a...

CVE-2023-26360-adobe-coldfusion-rce-exploit

Critical vulnerabilities in Adobe Coldfusion CVE-2023-26359, CVE-2023-26360 and CVE-2023-26359 On March 8, 2023, Adobe released security updates to address critical vulnerabilities in Adobe ColdFusion, a popular web application development platform. These vulnerabilities, classified as improper...

CVE-2024-24919-PoC

CVE-2024-24919-PoC Vulnerability References https://nvd.nist.gov/vuln/detail/CVE-2024-24919 https://censys.com/cve-2024-24919/ https://vulners.com/cve/CVE-2024-24919 https://support.checkpoint.com/results/sk/sk182336 Hotfix About CVE-2024-24919 The vulnerability allows an unauthenticated remote...

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

Ghost Arbitrary File Read Exploit CVE-2023-40028 Overview This script exploits a vulnerability in Ghost CMS CVE-2023-40028 to read arbitrary files from the server. By leveraging a symlink in an uploaded ZIP file, an attacker can gain unauthorized access to sensitive files on the system. Features ...