EUVD-2026-74725

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...

CVE-2026-87747

Ragic Enterprise Cloud Database is affected by an Arbitrary File Read vulnerability caused by Relative Path Traversal . Privileged remote attackers can exploit this flaw to download arbitrary system files, resulting in high confidentiality impact with no integrity or availability impact. The CVSS...

CVE-2026-87747 Ragic｜Enterprise Cloud Database - Arbitrary File Read

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...

CVE-2022-44268-fixed-PoC

Fixed version of CVE-2022-44268 Some PoCs don't work for specific file contents. This PoC may work for contents that don't work with other PoCs. Installation Git clone this repo. Then, install the requirements. root@kitploit: pip install -r requirements.txt Usage To embed your payload within an...

ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

SOC Alert Analysis: Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Introduction CVE-2024-24919 is a critical zero-day vulnerability in Check Point Security Gateways that allows unauthenticated remote attackers to read arbitrary files from affected systems. Discovered in May 202...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

CVE-2023-1177

CVE-2023-1177 | | MLFlow Path Traversal | Tested on MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

EsFileExplorer-CVE-2019-6447

EsFileExplorer-CVE-2019-6447 Exploiting Android Vulnerability in ES File Explorer Vulnerability The ES file explorer was created by ES worldwide, which is a part of DO Global and is based in China. This ES file explorer is only available for use on mobile devices that run the Android operating...

CVE-2021-26085

CVE-2021-26085 Atlassian Confluence Server 7.5.1 Pre-Authorization Arbitrary File Read vulnerability POC Vulnerable Endpoints: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.confluence/confluence-webapp/pom.properties...

CVE-2020-19360

CVE-2020-19360 Fhem arbitrary file read poc FOFA search title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com single URL test python3 Fhem.py -f url.txt batch detection Tip After the scan is complete, a vulnerable.txt file with vulnerabilities will be...

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform Arbitrary File Read Vulnerability CVE-2024-41713 Due to an authentication bypass vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab software, and insufficient input validation, an unauthenticated remote...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC for CVE-2009-0229 "Print Spooler Read File Vulnerability" LPE AFR related to CVE-2020-1048 Details Author: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC date: 2010-xx-xx Release date: 2020-05-14 reminded/inspired by CVE-2020-1048 - yes, I am too...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit Video 📼 https://youtu.be/quKxwNAMBIA Usage 🛠 Poison the image ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit: Upload...

CVE-2020-5902

Readme F5 BIG-IP arbitrary file read + remote command execution RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...

CVE-2019-17662

CVE-2019-17662 Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Copy of MuirlandOracle's python script...

CVE-2023-49031

LFI Tikit eMarketing CVE-2023-49031 Discovery On November 2023, a novel local file inclusion vulnerability was identified in the “eMarketing” platform developed by Tikit now Advanced during a client engagement. This issue was resolved with Advanced on February 2024 Affected Versions This...

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: Arbitrary File Read Vulnerability Leading to RCE Jenkins uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces an @ character followed by a file...