13870 matches found
CVE-2026-41551
Reproducción de CVE-2026-41551 Vulnerabilidad: recorrido de ruta relativa en los servicios fileserver / fileserver2 de Siemens ROS CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Versiones afectadas: todas las versiones de ros-sharp name.substr10; // elimina "package://"...
CVE-2026-87747
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
EUVD-2026-74725
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-87747
Ragic Enterprise Cloud Database is affected by an Arbitrary File Read vulnerability caused by Relative Path Traversal . Privileged remote attackers can exploit this flaw to download arbitrary system files, resulting in high confidentiality impact with no integrity or availability impact. The CVSS...
CVE-2026-87747 Ragic｜Enterprise Cloud Database - Arbitrary File Read
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2022-44268-fixed-PoC
CVE-2022-44268 的修复版本 一些 PoC 对于特定的文件内容不起作用。此 PoC 可能适用于在其他 PoC 中无法起效的内容。 安装 Git clone 此仓库。然后，安装依赖项。 root@kitploit: pip install -r requirements.txt 使用方法 要将你的 payload 嵌入到图像中： root@kitploit: python3 MagickPNG.py -i -f -o 然后使用 ImageMagick 更新你的 PNG。 要从 ImageMagick 修改后的文件中提取数据： root@kitploit: python3...
Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-
SOC警报分析：Checkpoint Security Gateway任意文件读取漏洞 CVE-2024-24919 介绍 CVE-2024-24919 是一个关键的 Check Point Security Gateways 零日漏洞，允许未经认证的远程攻击者从受影响系统中读取任意文件。该漏洞于 2024 年 5 月被发现并在野外被积极利用，针对启用了远程访问 VPN 或移动接入 Blade 的设备。攻击者可利用此漏洞访问敏感文件（如密码哈希和 SSH 密钥），进而可能完全控制系统。鉴于其严重性和已被利用的状态，强烈建议立即修补和缓解。 调查与修复 为调查并修复该警报，我采取了以下步骤...
CVE-2020-3452_Cisco_ASA_PathTraversal
CVE-2020-3452CiscoASAPathTraversal Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only....
CVE-2020-19360
CVE-2020-19360 Fhem任意文件读取poc FOFA搜索 title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com 单个url测试 python3 Fhem.py -f url.txt 批量检测 提示 完成扫描后会在目录内自动生成存在漏洞的vulable.txt文件 免责声明 由于传播、利用此文所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。...
CVE-2024-41713POC
CVE-2024-41713POC Mitel MiCollab 企业协作平台 任意文件读取漏洞CVE-2024-41713由于Mitel MiCollab软件的 NuPoint 统一消息 NPM 组件中存在身份验证绕过漏洞，并且输入验证不足，未经身份验证的远程攻击者可利用该漏洞执行路径遍历攻击，成功利用可能导致未授权访问、破坏或删除用户的数据和系统配置。影响范围：version MiCollab 9.8 SP2 9.8.2.12...
CVE-2009-0229-PoC
CVE-2009-0229-PoC CVE-2009-0229 "打印后台处理程序读取文件漏洞" LPE AFR 的PoC（与 CVE-2020-1048 相关） 详情 作者：Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC 日期：2010-xx-xx 发布日期：2020-05-14（受 CVE-2020-1048 提醒/启发——是的，我来晚了 :D ） 摘要 如果你想找0day，那就挖掘操作系统的打印和传真子系统吧 : —— 由于历史原因存在大量遗留代码——每个人都有漏洞可挖 = 说明...
CVE-2020-5902
Readme F5 BIG-IP 任意文件读取+远程命令执行RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE + +-------------------------------------------------------------+ + USE: python3 + +...
CVE-2021-43798
GrafanaArbitraryFileRead Uso 1. Mostrar información root@kitploit: ❯ go run main.go -s INF VulnInfo: "Name": "Grafana Arbitrary File Read", "VulID": "nil", "Version": "1.0", "Author": "z3", "VulDate": "2021-12-07", "References": "https://nosec.org/home/detail/4914.html" , "AppName": "Grafana",...
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
File-Read-CVE-2024-9264
File-Read-CVE-2024-9264 Grafana 文件读取漏洞（CVE-2024-9264）的概念验证 前提条件 已认证的 Grafana 用户，具备 Viewer 或更高权限 必须安装 DuckDB 二进制文件，且可通过 Grafana 的 PATH 访问 受影响版本 Grafana = v11.0.0（所有 v11.x.y 版本均受影响） 使用方法 root@kitploit: python3 poc.py --url --user --password --file 示例 root@kitploit: python3 poc.py --url...
CVE-2020-17519-Apache-Flink
CVE-2020-17519 Apache Flink 任意文件读取 影响范围 Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd 脚本使用方法 python3 CVE-2020-17519 --help 查看使用帮助 python3 CVE-2020-17519 -u http://127.0.0.1:8080 检测某个地址是否存在漏洞 python...