CVE-2026-86251 h3 before 1.15.9 Path Traversal via Double Decoding

h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...

CVE-2026-66491

Arbitrary File Read via getSource in PhocaCommander PhocaCommander ≤ 6.1.3 — Authenticated Admin Path Traversal, No CSRF Required SUMMARY An arbitrary file read vulnerability exists in PhocaCommander's file editor endpoint. The getSource function decodes a base64-encoded filename parameter and...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

CVE-2025-30208

CVE-2025-30208 — Vite Arbitrary File Read · v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Severity: CVSS 5.3 Medium network-accessible dev server ⚠ For authorized security engagements only. Unauthorized use against systems you do not own or have explicit written permission to test is illegal...

cve-2025-58360

GeoServer: CVE-2025-58360 Disclaimer The code and information contained within this repository is for educational and research purposes only. The owner of the repository takes no responsibility for anything you do with the code and/or information within this repository. Your actions are your own...

CVE-2024-36991-Tool

CVE-2024-36991-Tool This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories e.g...

n8n-cve-2026-21858

n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — n8n unauthenticated file read to RCE exploit...

vcenter-cve-2021-21980-lab

CVE-2021-21980 Vulnerable Test Environment Overview Realistic test environment simulating VMware vSphere Web Client path traversal vulnerability. ⚠️ WARNING: Vulnerable test environment. Do NOT expose to internet! Quick Start Build and Run root@kitploit: podman build -t vcenter-lab . podman run -d...

CVE-2026-37066

CVE-2026-37066 Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with super administrator role to disclose sensitive information via two specially crafted http requests POST...

CVE-2026-67185-Unauthenticated-Path-Traversal-Allows-Arbitrary-File-Read-TinyWeb-

Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read TinyWeb Assigned CVE ID: CVE-2026-67185 Summary TinyWeb builds the path of the file to serve by joining the web root with the request URL exactly as it arrives, with no normalization. A remote client that has never...

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 is a high-severity path traversal vulnerability CVSS 3.1 score: 7.5 affecting Grafana versions 8.0.0-beta1 through 8.3.0. It allows unauthenticated attackers to read arbitrary files from the server by exploiting improper sanitization in the /public/plugins/:pluginId...

CVE-2023-22047---Oracle-PeopleSoft-LFI

CVE-2023-22047---Oracle-PeopleSoft-LFI CVE-2023-22047 is a critical unauthenticated Local File Inclusion LFI vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows an attacker to read arbitrary files from the target server without any authentication...

CVE-2026-67281

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - PeopleSoft LFI Exploit Unauthenticated Local File Inclusion LFI in Oracle PeopleSoft Enterprise PeopleTools 👨‍💻 Author...

CVE-2026-27971_POC

CVE-2026-27971 — Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...

EUVD-2026-72028

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...

CVE-2026-67281 Unauthenticated file read in Mikrotik RouterOS

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...

CVE-2026-67281

MikroTik RouterOS WebFig is affected by an unauthenticated file-read vulnerability in the /jsproxy path. The root cause is a stale uninitialized principal pointer retained by a newly allocated session, which an attacker can exploit by preparing the allocator and supplying parent-directory compone...

CVE-2025-13796-PoC

CVE-2025-13796-PoC deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery PoC : root@kitploit: curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...

NVMS-1000-Directory-Traversal-Bash

NVMS-1000-Directory-Traversal-Bash Directory Traversal Exploit written in Bash for NVMS-1000 CVE-2019-20085. Usage root@kitploit: ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Example root@kitploit: ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Disclaimer This POC was...