CVE-2025-68428_PoC

CVE-2025-68428PoC root@kitploit: $ git clone https://github.com/12nio/CVE-2025-68428PoC/ && cd CVE-2025-68428PoC $ sudo docker build -t poc . $ sudo docker run --rm -p 8080:8080 --name vuln poc $ curl "http://127.0.0.1:8080/api/v1/generate-invoice?client=Dinko&branding=../secret" --output poc.pdf...

CVE-2024-46987

CVE-2024-46987 - Lecture Arbitraire de Fichiers Authentifiée sur Camaleon CMS Ce dépôt contient un script de Preuve de Concept PoC pour CVE-2024-46987 , qui permet la lecture arbitraire de fichiers LFI / Path Traversal sur Camaleon CMS. Description Une vulnérabilité de Path Traversal a été...

EUVD-2026-68878

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...

CVE-2026-79407

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...

CVE-2026-79407

CVE-2026-79407 is a path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 . The vulnerable code resides in metagpt/ext/spo/utils/load.py, where set_file_name() and load_meta_data() join an attacker-controlled FILE_NAME value with the settings directory and open the resulting path wit...

Linux Distros Unpatched Vulnerability : CVE-2026-17615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending ...

Linux Distros Unpatched Vulnerability : CVE-2026-82660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local...

CVE-2024-40422

CVE-2024-40422 Implémentation Python/PoC pour CVE-2024-40422. Exploite une vulnérabilité critique de traversée de répertoire dans le point de terminaison /api/get-browser-snapshot de Devika v1 pour lire des fichiers système arbitraires...

grafanaExp

grafanaExp استغلال الثغرة CVE-2021-43798 في Grafana لقراءة الملفات التعسفية، والكشف تلقائياً عن وجود الثغرة، والمكونات الإضافية الموجودة، واستخراج المفتاح، وفك تشفير ملف قاعدة بيانات الخادم، وإخراج معلومات datasource. طريقة الاستخدام توفير وظائف الاستغلال وفك التشفير. root@kitploit: ➜ ./grafanaEx...

CVE-2026-56718

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send...

flar3ad

flar3ad est un outil qui exploite la CVE-2026-51031 pour lire des fichiers depuis un serveur cible en tirant parti de l'endpoint /v1 de l'API de FlareSolverr et en utilisant la fonction driver.get afin d'exploiter la vulnérabilité. Explication détaillée dans le blog de xinyi. Installation...

CVE-2026-56718

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service. An unauthenticated remote attacker can supply path traversal sequences in the HTTP request URI on port 80 to read arbitrary files with root privileges . Exposed data inclu...

EUVD-2026-68290

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send...

CVE-2026-56718 AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send...

PoC-CVE-2025-12097

CVE-2025-12097 Description La modification NI du serveur Appweb contient une vulnérabilité de traversée de répertoire qui permet à un attaquant de lire des fichiers arbitraires sur le serveur. Le chemin URI /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/windows/win.ini sera converti en : pathInfo cch...

CVE-2012-5519

cups-root-file-read.sh ⭐ une implémentation bash du module metasploit 'cupsrootfileread.rb' conçue pour le pentest et les CTF. principalement un court exercice de script bash. conçu pour être un programme autonome qui exploite CVE-2012-5519 sur les systèmes linux; il fournit à l'utilisateur une...

cve-2020-3452

cve-2020-3452 неавторизованное чтение файлов в Cisco ASA и Firepower. установка git clone https://github.com/Loneyers/cve-2020-3452 && cd cve-2020-3452 && go build использование ./cve-2020-3452 url.txt 40...

CVE-2025-10897

CVE-2025-10897 WooCommerce — это плагин электронной коммерции с открытым исходным кодом для WordPress, который превращает веб-сайты в интернет-магазины. WooCommerce Designer Pro — это плагин WordPress, разработанный JMA Plugins, который позволяет покупателям проектировать и настраивать товары...

php_filter_chain_oracle_poc

phpfilterchainoraclepoc نظرة عامة نشر فريق Synacktiv مقالة بحثية متعمقة، PHP Filter Chains: File Read from Error-Based Oracle ، تم الكشف عنها لأول مرة في مسابقة DownUnder CTF 2022. استند هذا البحث إلى تحدي من @hashkitten، حيث كان على اللاعبين تسريب ملف /flag من بنية تحتية ضعيفة تعتمد على PHP...

CVE-2020-3452

CVE-2020-3452 قراءة ملف غير مصادق عليها في Cisco ASA و Cisco Firepower Saikat Karmakar | نوفمبر : 2021 سيقوم هذا باختبار ما إذا كان المضيف المعطى عرضة للثغرة CVE-2020-3452 أم لا المتطلبات: root@kitploit: requests termcolor الاستخدام: root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage...