The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

cve-2016-1764

CVE-2016-1764 漏洞利用 PoC 代码 无需破解加密即可恢复明文 iMessage 数据 作者 Shubham Shah 来自 Bishop Fox Joe DeMesy 来自 Bishop Fox Matthew Bryant CVE-2016-1764 供应商： Apple 发布日期： 2016年4月8日 补丁日期： 2016年3月21日 受影响系统： OS X Mountain Yosemite、El Capitan 上的 Messages 尽管近期围绕 Apple...

CVE-2026-76424 Cisco ISE Arbitrary File Access Vulnerability

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a...

CVE-2026-76424

Cisco ISE REST API contains an arbitrary file access vulnerability caused by insufficient validation in file operations . An authenticated remote attacker holding valid administrative credentials can upload or copy files using a crafted path, allowing files to be placed at arbitrary locations on ...

Vitejs-exploit

Vite Exploit CVE-2025-31125 Descripción: Explota el path traversal en el endpoint @fs del servidor de desarrollo de Vite CVE-2025-31125 para acceder a archivos sensibles como /etc/passwd y /etc/hosts mediante URLs manipuladas. Creado por Muhammad Waseem. Uso: python viteexploit.py -u...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

Aegis

AEGIS 面向 AI 编码代理的独立、操作系统级可观测性 从代理外部观察 AI 代理在你的机器上实际执行的操作——进程、文件、网络——无需任何钩子。 AEGIS 是一个面向 AI 代理的独立、操作系统级观察器。 无论代理是如何启动的，或者它是否配合监控，它都会观察代理进程、文件访问和网络活动——并将每一条观察结果关联到特定的代理 实例 ，且该归属的证据会被明确记录在案。它基于 CommonJS JavaScript 监控引擎构建，渲染进程和共享类型使用 TypeScript。开源、本地化、无遥测 ——一切数据都保留在你的机器上。 演示录制于...

CVE-2020-17518

Apache Flinkのディレクトリトラバーサル脆弱性、REST APIを介してリモートファイルの読み書きが可能 脆弱性ID： CVE-2020-17518 脆弱性の説明： CVE-2020-17518：REST APIを介したリモートファイルへの書き込み 影響を受けるバージョン： Flink 1.5.1-1.11.2 安全なバージョン： Flink 1.11.3またはFlink 1.12.0 Flink 1.5.1ではREST APIが導入され、悪意を持って変更されたHTTPヘッダーを介して、任意のファイルをファイルシステムの任意の場所にコピーできます。 使用法： 単体：python...

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker 容器命令执行工具 一个功能强大的 Docker 远程 API 漏洞利用工具，用于 CVE-2025-9074 漏洞的安全研究和测试。 核心优势 ✅ 全自动容器生命周期管理 ：自动创建临时容器，操作完成后自动清理，不留痕迹 ✅ 智能路径处理 ：自动识别并转换 Windows 路径为 Docker 挂载格式 ✅ 全自动化操作流程 ：无需手动输入复杂命令，菜单式交互，一键完成文件操作 ✅ 跨平台兼容 ：完美支持 Windows 和 Linux 系统 部分功能效果图 功能特性 容器操作 查看运行中的容器 查看所有容器（包括停止的） 创建新容器 停止容器...

whatfiles

whatfiles Whatfiles is a Linux utility that logs what files another program reads/writes/creates/deletes on your system. It traces any new processes and threads that are created by the targeted process as well. Rationale: I've long been frustrated at the lack of a simple utility to see which file...

Remot3d

Remot3d - Una Forma Fácil de Explotar Se actualizará pronto Es fácil crear una puerta trasera al instante, la puerta trasera se puede usar en un proceso remoto a través de una terminal de Linux en el servidor que ejecuta el programa de lenguaje PHP. Hecho para evadir el sistema que está...

CVE-2025-29927-PoC

CVE-2025-29927 研究与安全测试框架 此仓库包含与 CVE-2025-29927 相关的研究与分析 。 它演示了针对 Web 应用中路径遍历/中间件配置错误漏洞的安全、受控测试方法。 ⚠️ 重要提示： 此仓库仅用于教育目的。请不要 在未经明确许可的情况下针对任何系统进行测试。 概述 CVE-2025-29927 涉及中间件处理中的漏洞，如果配置不当，可能导致未经授权的文件访问。 此仓库记录了： 漏洞分析 用于隔离实验室环境的安全测试脚本 建议与缓解策略 安全测试 所有 PoC 脚本仅用于针对本地或实验室环境 运行。它们： 1. 向测试服务器发送请求 2. 比较基线与修改后的响应...

CVE-2024-40445_CVE-2024-40446

MimeTeX 漏洞参考 CVE-2024-40445 & CVE-2024-40446 本仓库是 CVE-2024-40445 和 CVE-2024-40446 这两个影响 MimeTeX 的安全问题的公开参考。MimeTeX 是一个用 C 编写的轻量级开源 LaTeX 渲染器。 ⚠️ MimeTeX 似乎已不再积极维护。强烈建议用户和开发者在生产环境中使用前评估相关风险。 漏洞 CVE-2024-40445 — 目录遍历 MimeTeX 1.77 之前版本存在目录遍历漏洞。在命令行或 CGI 模式下运行时，精心构造的用户输入可用于在 Windows 系统上执行未经授权的文件访问操作。...

LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments

The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads. id:...

Java-springboot-codebase 1.1 - Arbitrary File Read

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access

WordPress Welcart e-Commerce plugin before 2.8.5 is susceptible to arbitrary file access. The plugin does not validate user input before using it to output the content of a file, which can allow an attacker to read arbitrary files on the server, obtain sensitive information, modify data, and/or...

Gradio < 2.5.0 - Arbitrary File Read

Files on the host computer can be accessed from the Gradio interface id: CVE-2021-43831 info: name: Gradio 2.5.0 - Arbitrary File Read author: isacaya severity: high description: | Files on the host computer can be accessed from the Gradio interface impact: | An attacker would be able to view the...

Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending

Frontend File Manager Plugin WordPress plugin through 23.5 contains an open relay and unauthorized file access vulnerability caused by lack of authentication and security checks, letting unauthenticated attackers send emails and access files, exploit requires no authentication. id: CVE-2026-0829...

Control Web Panel (CWP) - File Inclusion

In CWP Control Web Panel, previously CentOS Web Panel before version 0.9.8.1107, an unauthenticated attacker can abuse null byte %00 injection with the "scripts" parameter in the /user/loader.php or /user/login.php endpoints to register arbitrary API keys or access sensitive files. This can be...