CVE_2024_42007

CVE-2024-42007 - php-spx Path Traversal Exploit This repository contains a Python 3 proof-of-concept PoC script for CVE-2024-42007. Vulnerability Summary: php-spx = 0.4.15 suffers from a path traversal vulnerability via the SPXUIURI parameter, allowing unauthenticated attackers to read arbitrary...

CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2025-14611 CentreStack 및 Triofox 전체 Poc/Exploit 요약 이 취약점은 Gladinet CentreStack 및 Triofox 제품의 하드코딩된 암호화 키로 인해 발생하며, 위조된 액세스 티켓을 통한 임의 파일 읽기가 가능합니다. AES-256 암호화 구현은 애플리케이션 바이너리GladCtrl64.dll에 직접 내장된 정적이고 변경되지 않는 키를 사용합니다. 이 키를 추출한 공격자는 다음을 수행할 수 있습니다. 1. 합법적인 액세스 티켓을 복호화하여 내부 파일 경로 및 시스템 구성을...

CVE-2024-24919-PoC

CVE-2024-24919-PoC 취약점 참조 https://nvd.nist.gov/vuln/detail/CVE-2024-24919 https://censys.com/cve-2024-24919/ https://vulners.com/cve/CVE-2024-24919 https://support.checkpoint.com/results/sk/sk182336 핫픽스 CVE-2024-24919 정보 이 취약점은 인터넷에 연결되어 있고 Remote Access VPN 또는 Mobile Access Software Blades가 활성화된...

Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

Ghost Arbitrary File Read Exploit CVE-2023-40028 Overview This script exploits a vulnerability in Ghost CMS CVE-2023-40028 to read arbitrary files from the server. By leveraging a symlink in an uploaded ZIP file, an attacker can gain unauthorized access to sensitive files on the system. Features ...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - 限定されたリモートファイル読み取り/インクルード 脆弱性のあるエンドポイント: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

CVE-2020-12116

CVE-2020-12116 Proof of concept code to exploit CVE-2020-12116: Unauthenticated arbitrary file read on ManageEngine OpManger. Summary The latest release of OpManger contains a directory traversal vulnerability that allows unrestricted access to every file in the OpManager application. This includ...

CVE-2022-44900-demo-lab

CVE-2022-44900 Demo lab Demo webapp vulnerable to CVE-2022-44900. CVE-2022-44900 is a directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier that allow attackers to read and write arbitrary files on the local machine via...

CVE-2026-70449

Improper validation of resource URL attributes in Apache Wicket allows an unauthenticated remote attacker to read files from the web application, including files under WEB-INF that the servlet container would not otherwise serve. The locale, style and variation attributes decoded from a package...

CVE-2024-9264

CVE-2024-9264 Grafana 인증 후 DuckDB SQL 인젝션 RCE, 파일 읽기 개념 증명 PoC 이 PoC는 CVE-2024-9264의 악용을 시연하며, 인증된 사용자가 DuckDB SQL 쿼리를 수행하여 파일시스템의 임의 파일을 읽거나 원격으로 임의 코드를 실행할 수 있음을 보여줍니다. 임의 코드 실행은 Grafana v11.0.0에서만 가능합니다. 파일 읽기는 모든 취약한 버전에서 가능합니다. 설정: 다음을 통해 필요한 종속성을 설치합니다: root@kitploit: pip install -r...

flowise-arbitrary-file-read-getFileFromStorage

Flowise の未認証任意ファイル読み取り（getFileFromStorage）— 提案中の新規 CVE CVE-2025-71338（ 書き込み シンク）とは別の脆弱性 です。これは、Flowise のドキュメントストアローダー「rehydrate」パスにおける未認証の任意ファイル読み取り であり、影響を受けるのは 1.7.1 – 2.2.3 、2.2.4 で修正されました。/root/.flowise/encryption.key を読み取ると、保存されているすべてのプロバイダー資格情報を復号する鍵が得られます → 資格情報が完全に漏洩します。 目次...

pwn-pulse

pwn-pulse.sh Pulse Connect Secure SSL VPN 임의 파일 읽기 취약점CVE-2019-11510에 대한 익스플로잇 스크립트 작성자: braindead @BishopFox. Orange Tsai와 Meh Chang의 연구를 기반으로 합니다. 추가 통찰력을 제공한 Alyssa Herrera와 0xDezzy에게도 감사드립니다. 코드를 수정, 정리 및 크게 리팩토링한 bl4ckh0l3z에게 큰 감사를 드립니다! 이 스크립트는 CVE-2019-11510을 통해 다운로드된 Pulse Connect Secure...

Ghostcat-CNVD-2020-10487

Ghostcat exp for CNVD-2020-10487CVE-2020-1938 File reading and file execution caused by arbitrary attribute setting in the Tomcat AJP protocol. Vulnerability Analysis The code is for security testing only. Do not use it for illegal purposes. The user is responsible for any consequences, and I am...

CVE-2026-63312

A flaw was found in NLTK. This vulnerability, specifically within the StreamBackedCorpusView component, allows an attacker to bypass security enforcement by directly calling builtins.open instead of the intended pathsec.open. By controlling the fileid argument, an attacker can read arbitrary loca...

CVE-2026-70449

Apache Wicket (versions ≤ 8.18.0, ≤ 9.23.0, ≤ 10.10.0) is vulnerable to a path traversal via improper validation of package resource URL attributes (locale, style, variation). These attributes are spliced into the resource lookup path without checking for path separators, allowing an unauthentica...

CVE-2026-82877

ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an...

wordpress-true-ranker-cve-2021-39312

WordPress 플러그인 The True Ranker 2.2.2 - 임의 파일 읽기 CVE-2021-39312 에 대한 Python PoCProof-of-Concept로, The True Ranker seo-local-rank WordPress 플러그인 버전 ≤ 2.2.2 에 영향을 미칩니다. 취약점 세부 정보 CVE: CVE-2021-39312 유형: 임의 파일 읽기 영향을 받는 플러그인: The True Ranker 영향을 받는 버전: ≤ 2.2.2 공급업체 홈페이지:...

CVE-2026-82877 ILIAS before 9.22 Arbitrary File Read via SOAP addFile

ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an...

EUVD-2026-68463

ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an...

CVE-2026-82877 ILIAS before 9.22 Arbitrary File Read via SOAP addFile

ILIAS versions before 9.22, 10.0 through 10.9, and 11.0 through 11.2 contain an arbitrary file read vulnerability in the SOAP addFile method that allows authenticated users to read server files by supplying crafted XML with COPY-mode imports. Attackers can construct absolute file paths through an...

CVE-2026-82877

ILIAS eLearning versions before 9.22, 10.0–10.9, and 11.0–11.2 are affected by an arbitrary file read vulnerability in the SOAP addFile method. The root cause is that crafted XML with COPY-mode imports allows an unsandboxed import directory to be abused into constructing absolute file paths. Auth...