CVE-2019-18426

WhatsApp Vulnerabilities Disclosure - Open Redirect + CSP Bypass + Persistent XSS + FS read permissions + potential for RCE CVE-2019-18426 Technical Article Original Vulnerabilities Disclosures Documents...

CVE-2024-20767

CVE-2024-20767 CVE-2024-20767 - Arbitrary file system read using an Improper Access Control vulnerability in Adobe ColdFusion Please refer to ma4ter blogpost for more information: Adobe ColdFusion任意文件读取漏洞CVE-2024-20767分析 Products and Versions affected:...

log4shell

log4shell Python Script to scan the server file system for log4j jars that are vulnerable to CVE-2021-44228 and CVE-2021-45046. The script recursively goes through the file system including zip, ear, war to find log4j versions 2. to 2.15 with org/apache/logging/log4j/core/lookup/JndiLookup.class...

Disk-Arbitrator

Introduction Disk Arbitrator is a Mac OS X forensic utility designed to help the user ensure correct forensic procedures are followed during imaging of a disk device. Disk Arbitrator is essentially a user interface to the Disk Arbitration framework, which enables a program to participate in the...

CVE-2020-0753-and-CVE-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six unfixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned...

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Vanna - SQL injection

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

PSO - Printer Security Offensive

🖨️ PSO - Printer Security Offensive Version 0.4.0 | Changelog "Nmap for Printers" - Offensive security tool for printer pentesting. Fast. Focused. No bloat. ⚠️ Legal Notice PSO includes assessment and exploitation features. Always obtain explicit authorization before use. Safe mode: Scanning + IPP...

cve-2017-7374

cve-2017-7374 To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory...

CVE-2026-81994

Adobe Acrobat Reader is affected by a Prototype Pollution (CWE-1321) vulnerability that can lead to arbitrary file system read , allowing an attacker to access sensitive files and directories outside the intended access scope. Exploitation requires user interaction —a victim must open a malicious...

EUVD-2026-74204

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

zip_bomb

ZIP Bomb Creator ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted. This is useful for security experiments and testing file systems against ZIP Bomb attacks. Features Create a ZIP Bomb with configurable file count and size. Supports...

EUVD-2026-74070

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...

CVE-2022-26937

Windows Network File System Crash PoC CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data...

CVE-2026-69772

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...

CVE-2026-69372

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

CVE-2026-68875

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-83995

CVE-2026-83995 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with low attack complexity, low privileges required, and no user interaction needed, resulting in high impac...

LovelySn0w

LovelySn0w. a iOS CVE-2018-4150 Application example. if this doesn't compile in XCode please message me on twitter. it's probably my fault then! it's not completetd at the moment. if you find root@kitploit: //ACPV ›Some version ... you are here from the PS4-Scene, waiting for me to finish my work...