Lucene search
+L

8996 matches found

Kitploit
Kitploit
added 2026/08/27 4:32 a.m.2 views

CVE-2022-20128

CVE-2022-20128 एंड्रॉइड डीबग ब्रिज adb एक निर्देशिका ट्रैवर्सल हमले की चपेट में था, जिसे adb pull ऑपरेशन के दौरान दुर्भावनापूर्ण/समझौता किए गए adb डेमन द्वारा अंजाम दिया जा सकता था। दुर्भावनापूर्ण उपकरण: root@kitploit: ./adbdirtrav.py -lp 5111 --content "hello world" --destination-path /etc/proof...

8.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 4:29 a.m.2 views

MAGNOLIA-8348

MAGNOLIA-8348: Magnolia CMS में FreeMarker प्रतिबंध बाईपास 3 Magnolia CMS v6.2.17 और उससे नीचे के FreeMarker फ़िल्टर में एक समस्या हमलावरों को सुरक्षा प्रतिबंधों को बायपास करने और मनमाना कोड निष्पादित करने, मनमानी फ़ाइलों को पढ़ने/लिखने/स्थानांतरित करने/कॉपी करने/हटाने, या एक तैयार किए गए...

5.3AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.59 views

Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

10CVSS9AI score0.18957EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.13 views

Flowise - Path Traversal

Flowise = 2.2.8 contains a path traversal vulnerability caused by missing validation of chatflowId and chatId parameters in file handling, letting unauthenticated attackers read and write arbitrary files, exploit requires no authentication. id: CVE-2025-71334 info: name: Flowise - Path Traversal...

9.8CVSS5.5AI score0.0436EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.117 views

Aimhubio Aim Server 3.19.3 - Arbitrary File Overwrite

A vulnerability in the backuprun function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the runhash and repo.path parameters, which can be manipulated to create an...

9.8CVSS9.2AI score0.53113EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.10 views

All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path. This makes it possible for unauthenticated attackers to create or append a log file in arbitrary locations outside the intended storage...

6.5CVSS5.5AI score0.01352EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.97 views

n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution

n8n versions = 0.123.0 and = 0.123.0 and = 0.123.0 and 1.121.3 contain a critical authenticated remote code execution vulnerability via arbitrary file write. An authenticated user can exploit the Git node to overwrite critical files and execute untrusted code on the n8n server, potentially leadin...

9.9CVSS9.9AI score0.05258EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.22 views

FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File Write

FUXA, an open-source Node.js SCADA/HMI web interface, through version 1.2.9 exposes an unauthenticated POST /api/upload endpoint that resolves the attacker-controlled destination field from the JSON request body against the application directory with only a leading underscore prefix and no...

9.8CVSS6.5AI score0.11195EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.104 views

Plenti < v0.7.2 - OS Command Injection

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the...

9.3CVSS7.9AI score0.02705EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.25 views

Xerte Online Toolkits <= 3.15 - Remote Code Execution

Xerte Online Toolkits versions 3.15 and earlier expose the elFinder file manager connector at /editor/elfinder/php/connector.php without authentication CVE-2026-34413, because the access-control redirect for unauthenticated users does not call exit/die and execution continues server-side. This is...

9.8CVSS6.1AI score0.03575EPSS
SaveExploits2References6
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.37 views

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

7.5CVSS7.6AI score0.46966EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.34 views

YouPHPTube Encoder - Arbitrary File Write

Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack. id: CVE-2019-5128 info: name: YouPHPTube Encoder - Arbitrary...

10CVSS8.7AI score0.30174EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.20 views

JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write

JoomShaper Helix3 template framework versions 1.0 through 3.1.0 for Joomla expose an unauthenticated AJAX handler plgajaxhelix3 accessible via the Joomla comajax component. The onAjaxHelix3 plugin method processes dataaction=save requests without any authentication check or CSRF token validation...

7.5CVSS5.7AI score0.00992EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.26 views

Adobe ColdFusion - RDS Arbitrary File Write

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary code execution in the context of the current user. The RDS FILEIO WRITE operation allows unauthenticated...

10CVSS9.7AI score0.42388EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.22 views

dash-uploader 0.1.0 - 0.7.0a2 - Unauthenticated Arbitrary File Write via Path Traversal

fohrloop dash-uploader v0.1.0 through v0.7.0a2 contains a directory traversal vulnerability caused by improper handling in dashuploader/httprequesthandler.py components, letting remote attackers execute arbitrary code, exploit requires no special privileges. id: CVE-2026-38360 info: name:...

9.8CVSS9AI score0.05982EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.185 views

Camaleon CMS < 2.8.1 Arbitrary File Write to RCE

An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on depending on the permissions of the underlying filesystem. E.g. This can lead to a remote...

9.9CVSS6.5AI score0.37358EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.53 views

PyTorch TorchServe SSRF

TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity...

10CVSS8.2AI score0.355EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.34 views

esm.sh <= v136 - Arbitrary File Write via Path Traversal

esm.sh = 136 contains a path traversal caused by improper canonicalization of the X-Zone-Id HTTP header, letting attackers write files outside the intended storage directory, exploit requires crafted header input. id: CVE-2025-59342 info: name: esm.sh = v136 - Arbitrary File Write via Path...

6.9CVSS8.7AI score0.03031EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/08/27 4:16 a.m.4 views

CVE-2025-8110

CVE-2025-8110 — Gogs 符号链接遍历 → RCE 概述 CVE-2025-8110 是 Gogs(自托管 Git 服务) = 0.13.3 版本中的一个严重漏洞。PutContents API 对文件路径进行目录遍历(../)校验,但在写入前未解析 符号链接。认证用户可提交一个包含指向任意服务器文件的符号链接的 commit,然后对那个符号链接调用 PutContents,从而以攻击者控制的内容覆写真实文件。 这是先前 CVE-2024-55947 修复的绕过——该修复只解决了直接路径遍历,而未解决基于符号链接的遍历。 详细信息| 值 ---|--- CVE|...

8.8CVSS7.8AI score0.82693EPSS
SaveExploits21References2
Kitploit
Kitploit
added 2026/08/27 4:16 a.m.2 views

CVE-2025-8088

技术深度解析:CVE-2025-8088 - 坚忍不拔的路径遍历漏洞 免责声明:本文内容仅供教育和研究目的。请勿将本信息用于任何恶意活动。 今天,我们将深入探讨一个引人入胜的路径遍历漏洞,编号为 CVE-2025-8088 。该漏洞允许攻击者在受害者解压特制的 RAR 压缩包时,将任意文件写入受害者系统上的任何位置。这一特定漏洞利用之所以有趣,在于它采用了“霰弹枪”式的策略,确保无论用户在何处解压压缩包,都能成功投递载荷。 本文将详细解析所提供的 Python 概念验证代码(PoC)中用于构造恶意 .rar 文件的技术细节。 目标:实现持久化 该 PoC 的最终目标经典且有效:持久化...

8.8CVSS7.5AI score0.94551EPSS
SaveExploits35
Rows per page
Query Builder