13948 matches found
CVE-2026-75998
Adobe ColdFusion is affected by an Improper Access Control flaw (CWE-284) that allows an unauthenticated, remote attacker to perform an arbitrary file system read , gaining access to sensitive files and directories outside the intended scope. No user interaction is required. The CVSS 3.1 score is...
CVE-2026-75998 ColdFusion | Improper Access Control (CWE-284)
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...
CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write
CVE-2021-31800 - Impacket SMB Server Arbitrary file read/write CVSS Vector : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Score : 9.9 Critical Description A path traversal in smbserver.py allows an attacker to read/write arbitrary files on the server. Detailed explanation of this issue:...
CVE-2026-28624
In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2019-8997
CVE-2019-8997 An XML External Entity Injection XXE vulnerability in the Management System console of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering...
CVE-2024-2928
CVE-2024-2928 Arbitrary file read exploit for CVE-2024-2928 in mlflow specifically in version 2.9.2, which was fixed in version 2.11.3 The exploit code tested on Linux Source: https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298 Usage python3 CVE-2024-2928.py -t 127.0.0.1 -p 5000 After...
EUVD-2026-65224
GitPython: Incomplete unsafegitrevisionoptions denylist omits --contents/-S, enabling arbitrary file read via Repo.blame...
CVE-2026-31156
CVE-2026-31156 There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters passed in from the command line. Attackers can read any readable file by constructing malicious paths, posing a risk of information...
GHSA-MMG6-4QMV-6PC8 Infracost: Arbitrary file read via config-template readFile symlink traversal
Impact Path traversal via link following in the Infracost config-template parser. The readFile, pathExists, isDir, and matchPaths template functions confined repo-supplied paths with a lexical filepath.Rel check plus a leaf-only os.Lstat: readFile "evil/file" With an intermediate directory symlin...
EUVD-2026-64035
Infracost: Arbitrary file read via config-template readFile symlink traversal...
CVE-2023-43494
CVE-2023-43494 Jenkins 2.50 hasta 2.423 ambos inclusive, LTS 2.60.1 hasta 2.414.1 ambos inclusive Lectura de archivos Referencias: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...
CVE-2021-33564
CVE-2021-33564 PoC Script de explotación para CVE-2021-33564 Inyección de argumentos en la gema Ruby Dragonfly. Uso Lectura arbitraria de archivos python3 poc.py -u https:///system/refinery/images -r /etc/passwd Escritura arbitraria de archivos python3 poc.py -u https:///system/refinery/images -w...
cve-2024-23897-jenkins-poc
CVE-2024-23897: Jenkins Arbitrary File Read args4j @-Syntax A self-contained, fully local reproduction of CVE-2024-23897 , the critical CVSS 3.1 base score 9.8 arbitrary file read in the Jenkins CLI. The project spins up two Docker stacks that differ only by the Jenkins minor version, runs the sa...
CVE-2024-34693
CVE-2024-34693: Lectura Arbitraria de Archivos del Servidor en Apache Superset Vulnerabilidad de validación de entrada incorrecta en Apache Superset, que permite a un atacante autenticado crear una conexión MariaDB con localinfile habilitado. Al habilitar localinfile en el cliente MySQL/MariaDB d...
CVE-2022-20818
CVE-2022-20818: Local Privilege Escalation via Partial File Read in Cisco SD-WAN The “config - load” feature from Viptela SSH shell uses “wget” to fetch remote “command” files over FTP. By hosting a malicious FTP server and replacing the local files created by wget with symlinks, an attacker can...
CVE-2021-43798-Grafana-File-Read
Grafana-File-Read Grafana Unauthorized File Read Affected versions: 8.0.0-lastest reference: - https://github.com/tangxiaofeng7/Grafana-File-Read Exploit the Grafana /public/plugins endpoint's lax URL route validation vulnerability to read arbitrary local files from the server. poc:...
GrafTraverse-CVE-2021-43798
GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework Command-line automation tool for authorized security testing of Grafana Directory Traversal CVE-2021-43798. Overview CVE-2021-43798 is an unauthenticated directory traversal vulnerability in Grafana 8.x that allows attackers to read...
EUVD-2026-64339
NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely...