CVE-2023-1177

CVE-2023-1177 | | MLFlow Path Traversal | Tested on MLflow 2.2.0 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST...

CVE-2023-40028

CVE-2023-40028 POC for CVE-2023-40028: Ghost CMS Arbitrary File Read Description Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an...

CVE-2021-29447

CVE-2021-29447 Impact Arbitrary File Disclosure: the content of any file on the host’s file system could be retrieved, e.g. wp-config.php which contains sensitive data such as database credentials. Server-Side Request Forgery SSRF: HTTP requests could be made on behalf of the WordPress...

CVE-2020-5902-F5BIG

CVE-2020-5902-F5BIG Just Run Command like 👇 root@kitploit: go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...

CVE-2021-33564

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument Injection in Dragonfly Ruby Gem. Usage Arbitrary File Read python3 poc.py -u https:///system/refinery/images -r /etc/passwd Arbitrary File Write python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:...

CVE-2022-44900-demo-lab

CVE-2022-44900 Demo lab Demo webapp vulnerable to CVE-2022-44900. CVE-2022-44900 is a directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier that allow attackers to read and write arbitrary files on the local machine via...

Webapp_Pentast

CVE-2022-31147 Proof of Concept & Manual Testing Guide This guide provides comprehensive methodologies for testing CVE-2022-31147, a critical path traversal vulnerability affecting the widely used matthiasmullie/minify library. The vulnerability allows attackers to exploit insufficient input...

CVE-2023-22974

CVE-2023-22974 OpenEMR 7.0.0 Arbitrary File Read...

php_filter_chains_oracle_exploit_for_CVE-2023-6199

PHP filter chains: file read from error-based oracle. Updated Script to exploit CVE-2023-6199 A CLI to exploit parameters affected by the file read caused by the the error-based oracle of PHP filter chains. It can be used to leak the content of a local file when passed to vulnerable functions, su...

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability root@kitploit: USAGE: python3 CVE-2019-11510.py...

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...

CVE-2024-43044-jenkins-creds

Введение Это эксплойт для CVE-2024-43044 — произвольного чтения файлов, позволяющего агенту получать файлы с контроллера. Эксплойт использует уязвимость для чтения файла credentials.xml и получения секретных ключей для его расшифровки. Исходный код:...

Grafana-CVE-2024-9264

Grafana-CVE-2024-9264 root@kitploit: POST /api/ds/query?dstype=expr&expression=true&requestId=Q100 HTTP/1.1 Host: 127.0.0.1:3000 Content-Type: application/json Cookie: grafanasession=a739fa9aeb235f2790f17de00fefe528 Content-Length: 368 "from": "1696154400000", "to": "1696345200000", "queries":...

CVE-2021-29447

CVE-2021-29447 WordPress 5.6-5.7 - Аутентифицированная Автор+ XXE https://blog.wpsec.com/wordpress-xxe-in-media-library-cve-2021-29447/ использование: -l LHOST пример: 127.0.0.1 -n NAME пример: payload.wav -dn DTDNAME пример: evil.dtd -r READ пример: ../wp-config.php evil-wav-dtd-xxe.py: error: t...

cve-2022-44268

Эксплойт, адаптированный для HackTheBox Pilgrimage Автоматический скрипт на Python, использующий cve-2022-44268, чтобы добавить значение profile с именем файла из входного списка файлов во входной файл, обновить загрузку файла изображения с использованием входного файла request.req из Burpsuite у...

CVE-2025-30208

🔥 CVE-2025-30208 Vite 임의 파일 읽기 취약점 스캐너 엔터프라이즈급 기능을 갖춘 CVE-2025-30208 고급 취약점 스캐너 Vite 임의 파일 읽기 취약점 탐지를 위한 전문 침투 테스트 도구 🚀 빠른 시작 • 📋 기능 • 🔧 사용법 • 📊 예제 • 🛡️ 보안 📖 개요 이것은 Vite 개발 서버에서 CVE-2025-30208 취약점을 탐지하고 악용하도록 설계된 포괄적인 취약점 스캐너입니다. 이 취약점은 Vite의 파일 시스템 엔드포인트를 통해 임의 파일 읽기 액세스를 허용하여, 민감한 설정 파일, 소스 코드 및...

CVE-2019-5418

CVE-2019-5418 テストケース 実行 : root@kitploit: $ rails s 概念実証 PoC : root@kitploit: Accept: ../../../../../../../../etc/passwd リクエスト 1 - root@kitploit: GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0 Accept:...

CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: 임의 파일 읽기 취약점 이 코드는 공격 요청과 응답 조합을 이해하는 데 도움이 됩니다. 프록시 도구를 사용하여 결과를 확인하세요. python3 CVE-2024-23897.py -u $url -p $filepathtoread...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Arbitrary File Read poc Fully Automated ⚙ An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image. Image Magic version effected root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25...

pfsense-security-research

Аутентифицированное произвольное чтение файлов в pfSense 2.8.0 через веб-интерфейс диагностики CVE ID: CVE-2025-53392 Дата: 2025-06-27 Автор: Seth Kraft Сайт разработчика: https://www.netgate.com/ Журнал изменений разработчика:...