Enlogic SCADA Virtual Controller Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

Enlogic SCADA Virtual Controller Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

CVE-2024-22263_Scanner

CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗...

CVE-2026-67401

CVE-2026-67401 — cPanel/WHM EmailTrack SQL Injection → Root RCE Proof-of-concept for CVE-2026-67401 , a critical SQL injection vulnerability in cPanel & WHM's EmailTrack functionality that allows an authenticated user with mail-related privileges to write arbitrary files and execute code as root...

CVE-2026-35204

CVE-2026-35204 This repository represents a PoC to a CVE-2026-35204 Description "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem...

vRealizeLogInsightRCE

VMSA-2023-0001 POC for VMSA-2023-0001 affecting VMware vRealize Log Insight which includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability CVE-2022-31706 VMware vRealize Log Insight broken access control Vulnerability CVE-2022-31704 VMware vRealize Log Insight...

CVE-2026-25732-NiceGUI-3.6.1

Author: Mohammed Idrees Banyamer Contact: Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE-2026-25732 — NiceGUI Path Traversal in FileUpload → Arbitrary File Write Exploit Title: NiceGUI Path Traversal in FileUpload Leading to Arbitrary File Write Date: 2025-06-06 Tested on:...

mysql-mysqldump-tab-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · mysql-mysqldump-tab-path mysql-mysqldump-tab-path Class: File write client Reach: Remote UI:R MySQL Community Server mysqldump 26.7.0 06a5c1c - Oracle mysqldump --tab=DIR writes one .sql per table using fnformat witho...

helm-plugin-path-traversal-security-assessment

CVE-2026-35204 - Helm Plugin Path Traversal Arbitrary File Write Consultant-Style Cybersecurity Report Professional vulnerability assessment report for Helm plugin path traversal risk, including technical analysis, impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details...

Tomcat_PUT_GUI_EXP

TomcatPUTEXPV1.4 Tomcat PUT Method Arbitrary File Write CVE-2017-12615 Graphical Exploitation Tool Vulnerability Introduction On September 19, 2017, Apache Tomcat officially confirmed and fixed two high-risk vulnerabilities, with CVE IDs: CVE-2017-12615 and CVE-2017-12616. Among them, the remote...

NotCVE-2026-0009

Path Traversal Vulnerability in nitroshare Description NitroShare Desktop v0.3.4 contains a path traversal vulnerability in its LAN file transfer server. The server listens on all network interfaces port 40818 without authentication. When receiving files, the name field from the sender's JSON ite...

cve-2022-41352

cve-2022-41352 generate poc.tar $ chmod +x cpiopocgen.py $ ./cpiopocgen.py show the middle finger to cpio $ cd /tmp $ mkdir -p poc/a/b copy poc.tar to /tmp/poc/a/b/ $ cd /tmp/poc/a/b/ $ cpio -i poc.tar $ ls -al ../ total 16 drwxrwxr-x 3 xabino xabino 4096 ott 10 14:56 . drwxrwxr-x 3 xabino xabino...

proftpd-sftp-copy-file-write

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · proftpd-sftp-copy-file-write proftpd-sftp-copy-file-write Class: Privilege leftover / File write Reach: Remote ProFTPD 1.3.9d f59f248 - proftpd.org contrib modsftp advertises copy-file once SFTPEngine is on...

CVE-2023-42819

CVE-2023-42819 CVE-2023-42819 Vulnerability Description JumpServer Arbitrary File Write Vulnerability CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. Place the script and required files in the same directory 2. Ensure Google Chrome is installed, and obtain its version number reg query...

CVE-2026-21440

CVE-2026-21440 Advanced detection-only PoC for CVE-2026-21440 affecting AdonisJS BodyParser. No exploitation included. CVE-2026-21440 – AdonisJS Advanced Detection PoC Description This project provides an advanced detection-only Proof of Concept PoC for CVE-2026-21440 , a critical Path Traversal ...

CVE-2023-25355-25356

Exploit and credits The exploit was found by [email protected] and is presented both in two amazing pieces: full disclosure article DEFCON31 slides A repo to automate even more this vulnerability has been published by Alex Linov: https://github.com/AlexLinov/sipXcom-RCE Objective The...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

postgres-basebackup-symlink

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · postgres-basebackup-symlink postgres-basebackup-symlink Class: File write Reach: Remote PostgreSQL 18.6 724edf9 - PostgreSQL Global Development Group CVE-2026-6475 added pathissafeforextraction for tar member names...

CVE-2026-23907

Apache PDFBox Path Traversal Vulnerability Vulnerability Summary Description Apache PDFBox's ExtractEmbeddedFiles example code does not sanitize filenames when extracting embedded files from PDFs. An attacker can embed files with path traversal sequences ../ to write files to arbitrary filesystem...