CVE-2022-20818

CVE-2022-20818: Local Privilege Escalation via Partial File Read in Cisco SD-WAN The “config - load” feature from Viptela SSH shell uses “wget” to fetch remote “command” files over FTP. By hosting a malicious FTP server and replacing the local files created by wget with symlinks, an attacker can...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-lastest reference: - https://github.com/tangxiaofeng7/Grafana-File-Read Exploit the Grafana /public/plugins endpoint's lax URL route validation vulnerability to read arbitrary local files from the server. poc:...

GrafTraverse-CVE-2021-43798

GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework Command-line automation tool for authorized security testing of Grafana Directory Traversal CVE-2021-43798. Overview CVE-2021-43798 is an unauthenticated directory traversal vulnerability in Grafana 8.x that allows attackers to read...

EUVD-2026-64339

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely...

EUVD-2026-64338

NLTK: Symlink-based sandbox bypass in FramenetCorpusReader bypasses the fix for CVE-2026-54292...

EUVD-2026-64337

NLTK: Stable FrameNet and NKJP readers parse outside-root XML...

CVE-2024-20767

Script de prueba de concepto para CVE-2024-20767 Visión general get-the-files.py es un script de Python que explota una vulnerabilidad en servidores Adobe ColdFusion CVE-2024-20767 para leer archivos del servidor. El script se basa en un método descrito en https://jeva.cc/2973.html. Descargo de...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

CVE-2024-36837

README.md CVE-2024-36837 Disclaimer ZhiLianYunCai SRM2.0 runtimeLog/download interface has an arbitrary file read vulnerability. Unauthenticated attackers can read important system files such as database configuration files, system configuration files, database configuration files, etc. through...

EUVD-2026-64333

NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read...

EUVD-2026-64309

NLTK: FileSystemPathPointer.open sandbox check is dead code — arbitrary file read via file:// protocol...

EUVD-2026-64314

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root...

CVE-2022-4140

CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...

CVE-2025-30208

CVE-2025-30208 !IMPORTANT Descargo de responsabilidad Este exploit es solo para fines educativos y de pruebas de seguridad ética. El uso de este exploit contra objetivos sin consentimiento mutuo previo es ilegal, y el desarrollador rechaza cualquier responsabilidad por mal uso o daños causados po...

cosmicsting-cve-2024-34102-exploit

CosmicSting CVE-2024-34102 Exploit Suite Complete exploit suite for CVE-2024-34102 - The CosmicSting XXE vulnerability in Adobe Commerce / Magento 2.4.x. Vulnerability Details CVE : CVE-2024-34102 CVSS 9.8 Type : XML External Entity Injection XXE Impact : Unauthenticated remote file read, SSRF,...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...

CVE-2024-36991

CVE 2024-36991 A path-traversal vulnerability that allows an attacker to read files from the system. Technical Summary CVE : 2024-36991 Path Traversal Affected Systems : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 Legal Disclaimer This tool is provided for authorized security assessments only...

CVE-2026-67367

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 All versions V3.1.13, SIMOVE Fleetmanager V3.2 All versions V3.2.4, SIMOVE Fleetmanager V3.3 All versions V3.3.2, SIMOVE Fleetmanager V4.0 All versions V4.0.1, SIPLANT V1.7 All versions, SIPLANT V2.2 All versions, SIPLANT V3.0 All...

path-traversal-CVE-2026-14628

Path Traversal Demo - Case Study : CVE-2026-14628 A minimal, runnable demonstration fo the Path TraversalCWE-22 vulnerability class, usicng the recently dislosed CVE-2026-14628 as a real-world reference point. The real vulnerability CVE-2026-14628 affects 'NousResearch/hermes-agent' 2026.5.16. Th...