CVE-2021-36750

CVE-2021-36749 Informazioni - Nel sistema di ingestion di Druid, InputSource viene utilizzato per leggere dati da una determinata fonte dati. Tuttavia, HTTP InputSource consente agli utenti autenticati di leggere dati da altre fonti rispetto a quelle previste, come il file system locale, con i...

CVE-2024-4040

CVE-2024-4040 PoC Exploit Python per CVE-2024-4040 Descrizione Una vulnerabilità di server side template injection in CrushFTP in tutte le versioni precedenti alla 10.7.1 e 11.1.0 su tutte le piattaforme consente ad attaccanti remoti non autenticati di leggere file dal filesystem al di fuori del...

CVE-2020-10977.py

CVE-2020-10977.py lettura arbitraria di file autenticata per Gitlab CVE-2020-10977 utilizzo: CVE-2020-10977.py -h --verifySSL -f FILELIST host token Exploit per la local file inclusion di gitlab lettura arbitraria di file autenticata - CVE-2020-10977. Modifica la variabile pullfiles per includere...

Apache-CVEs

Apache-CVEs Exploit criado em python3 para explorar vulnerabilidades conhecidas no servidor web Apache CVE-2021-41773, CVE-2021-42013 O que é Apache O Projeto Apache HTTP Server é um esforço para desenvolver e manter um servidor HTTP de código aberto para sistemas operacionais modernos, incluindo...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Lettura Arbitraria di File Uso 🛠 Avvelena l'immagine ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit: Upload poisoned PNG image. Verifica se l'exploit ha avuto successo...

CVE-2023-2825

CVE-2023-2825 Il 23 maggio 2023 GitLab ha rilasciato la versione 16.0.1 che ha risolto una vulnerabilità critica, CVE-2023-2825, che interessava le versioni Community Edition CE ed Enterprise Edition EE 16.0.0. La vulnerabilità consente a utenti non autenticati di leggere file arbitrari attravers...

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilità di Path Traversal in Zimbra 📋 Panoramica CVE-2025-68645 è una vulnerabilità di path traversal in Zimbra Collaboration Suite che consente ad attacker non autenticati di leggere file arbitrari dal filesystem del server. Endpoint Vulnerabile...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Prova de Conceito para CVE-2025-27136 XXE no Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + S3 service detected + Creating bucket: xxe-32d14993 + Server response: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Retrieving file via ?location + Response:...

CVE-2026-77012

The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not validate the URLs or destination paths it is given, allowing unauthenticated attackers to read arbitrary files from the...

CVE-2026-77012 Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password

The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not validate the URLs or destination paths it is given, allowing unauthenticated attackers to read arbitrary files from the...

CVE-2026-77012

CVE-2026-77012 affects the 爱采集数据采集和发布插件 (Icollect) WordPress plugin, versions through 1.0.0 . The root cause is a hardcoded default publishing password on an unauthenticated endpoint combined with missing validation of URLs and destination paths. This allows unauthenticated attackers to perform a...

EUVD-2026-68057

The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not validate the URLs or destination paths it is given, allowing unauthenticated attackers to read arbitrary files from the...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC Uno script bash per sfruttare facilmente la vulnerabilità di lettura arbitraria dei file di ImageMagick CVE-2022-44268 Versione di ImageMagick interessata root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-20...

CVE-2026-0847

CVE-2026-0847 — Classi Multiple CorpusReader di NLTK: Lettura Arbitraria di File tramite Path Traversal -orange?style=for-the-badge Panoramica...

EUVD-2026-67954

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal...

PT-2026-83409

Name of the Vulnerable Software and Affected Versions 爱采集数据采集和发布插件 WordPress plugin versions prior to 1.0.1 Description An unauthenticated endpoint relies on a hardcoded default secret instead of a per-install secret and fails to validate URLs or destination paths. This allows unauthenticated...

CVE-2026-55848

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

MapFish Print has XXE that allows reading arbitrary files of certain types

Summary XXE on MapFish Print allows reading arbitrary files of certain types. Eg /etc/passwd or k8 secrets and certs. https://github.com/mapfish/mapfish-print/commit/13020c0fbc299e5f604e4e66066311c4bf04d507 Details To trigger the XXE it is required to host a remote script and dtd file. When using...

CVE-2026-55848 mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain types

mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacker-controlled GML layer url in requests to the /api/print3/print endpoint and fetches XML parsed by...

CVE-2026-55848

MapFish Print (a component of the MapFish cartographic printing platform) is vulnerable to XML External Entity (XXE) injection in versions prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5. The vulnerability exists in the /api/print3/print endpoint, where an attacker-controlled GML layer URL...