CVE-2024-24919

Эксплойт CVE-2024-24919 Обзор Этот репозиторий содержит PoC-эксплойт для CVE-2024-24919 — критической уязвимости, обнаруженной в Check Point SVN. Уязвимость позволяет читать системные файлы. CVE ID : CVE-2024-24919 Уровень опасности : Критический Содержание Сведения об уязвимости Детали эксплойта...

CVE-2024-7928

CVE-2024-7928: Уязвимость произвольного чтения файлов в FastAdmin V1.3.4.20220530 Инструмент CVEHunter для обнаружения уязвимости и эксплуатации с целью получения данных БД для экземпляров FastAdmin для CVE-2024-7928, отличающийся точностью и асинхронной конкурентностью по сравнению с другими PoC...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN 認証前ファイル読み取り 参照 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3. https://packetstormsecurity.com/files/154176/Pulse-Secure-SSL-VPN-8.1R15.1-8.2-8.3-9.0-Arbitrary-File-Disclosure.ht...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

CISCO-CVE-2020-3452-Scanner-Exploiter

Сканер и эксплуататор CISCO CVE-2020-3452 Он сканирует целевые серверы с помощью Shodan, а затем находит уязвимые серверы для CVE-2020-3452 Cisco Adaptive Security Appliance и FTD — несанкционированное удаленное чтение файлов. О программе Уязвимость в интерфейсе веб-служб программного обеспечения...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update уязвимость несанкционированного доступа Broken Access Control LiteLLM /config/update не проверяет права роли вызывающего. Любой аутентифицированный пользователь с действующим API-ключом без прав администратора может изменять конфигурацию прокси,...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

White Star Software ProTop - Directory Traversal

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences. id: CVE-2025-44177 info: name:...

Nextjs <2.4.1 - Local File Inclusion

ZEIT Next.js before 2.4.1 is susceptible to local file inclusion via the /next and /static request namespace, allowing attackers to obtain sensitive information. id: CVE-2017-16877 info: name: Nextjs 2.4.1 - Local File Inclusion author: pikpikcu severity: high description: ZEIT Next.js before 2.4...

CVE-2024-24919

소개 Check Point CVE-2024-24919 취약점Wrong Check Point을 확인하고 악용하는 간단한 POC Python 스크립트입니다. 임의 파일 읽기에 취약합니다. 요구 사항 Python 3 Pip 필수 라이브러리/모듈 PIP로 설치 requests urllib3 tqdm 실행 방법 root@kitploit: PS C:\ python CVE-2024-24919.py list.txt output.txt Processing:...

CVE-2019-14678

CVE-2019-14678: XML-внешняя сущность в SAS XML Mapper SAS XML Mapper 9.45 имеет уязвимость XML External Entity XXE, которая может быть использована злоумышленниками несколькими способами. Примеры: чтение локальных файлов, внеполосная эксфильтрация файлов, подделка серверных запросов и/или...

CVE-2021-3019

CVE-2021-3019 CVE-2021-3019 Lanproxy - Vulnérabilité de traversée de répertoire et lecture arbitraire de fichiers Utilisation Téléchargement root@kitploit: git clone https://github.com/FanqXu/CVE-2021-3019.git cd CVE-2021-3019 Aide Exécutez sans paramètre pour afficher l'aide URL unique Testez un...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

adminer_CVE-2021-43008

CVE-2021-43008 — Vulnérabilité Adminer Lecture arbitraire de fichiers via un serveur MySQL malveillant 1. Qu’est-ce qu’Adminer ? Adminer est un outil web PHP permettant d’administrer facilement des bases de données MySQL, PostgreSQL, SQLite ou SQL Server. Il est couramment déployé comme...

CVE-2026-66671

An unauthenticated Local File Inclusion (LFI) vulnerability affects the WordPress plugin Verdure Core in versions

EUVD-2026-55235

A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...

EUVD-2026-54208

The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flows. Under certain conditions, the XML parser allows the resolution of external entities when handling user-supplied XML content during validation operations. This behavior...

CVE-2026-3415

CVE-2026-3415 affects WSO2 products where the SchemaValidator Mediator processes XML input during validation. The XML parser may resolve external entities under certain crafted payloads, enabling an attacker with sufficient privileges to read files on the server and possibly cause outbound reques...

CVE-2026-3415 XML External Entity (XXE) Injection via Schema Validation in Multiple WSO2 Products Allows File Reading and Denial of Service

The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flows. Under certain conditions, the XML parser allows the resolution of external entities when handling user-supplied XML content during validation operations. This behavior...