CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 jenkins-cli Jenkins File Leak / RCE（CVE-2024-23897）が実環境で悪用されているのを確認し、再現に成功しました。 お使いのJenkinsが匿名ユーザーやユーザー登録を許可している場合は、直ちに最新バージョンに更新してください。 java -jar jenkins-cli.jar -s https://www.wevul.com @/etc/passwd...

wholeaked

소개 root@kitploit: , ,' ', Utku Sen's |,-' wholeaked /c '\ ' |' -. "When you have eliminated the impossible, /-' \ whatever remains, however improbable, /'-'\ must be the truth" - Sherlock Holmes ' \ wholeaked는 파일 공유 도구로, 유출 사고 발생 시 책임자를 찾을 수 있도록 해줍니다. Go로 작성되었습니다. 어떻게? wholeaked는 공유할 파일과 수신자 목록을...

CVE-2024-23897

CVE-2024-23897 Jenkins 任意ファイル漏洩脆弱性 CVE-2024-23897 !CAUTION ⚠️ 免責事項: 重要: このスクリプトは教育、倫理的なテスト、および合法的な使用のみを目的として提供されています。明示的な許可なしに、いかなるシステムやネットワークでも使用しないでください。コンピュータシステムやネットワークへの不正アクセスは違法であり、許可されていない活動を行っていることが判明したユーザーは法的措置の対象となります。作成者は、このスクリプトの誤用によって生じたいかなる損害についても責任を負いません。...

EUVD-2026-60972

CodeWhale: imageanalyze follows workspace symlinks, leaking external file bytes...

CVE-2024-28000

LiteSpeed Cache Privilege Escalation Exp CVE-2024-28000Scan.py 该脚本首先会识别版本，判断是否为易损版本，后尝试确认log文件是否存在，若存在，则会尝试发包后再次请求log文件尝试查找hash泄露，若LiteSpeed启用debug，则有可能泄露正确Hash root@kitploit: usage: CVE-2024-28000Scan.py -h -f F -t T -p PROXY CVE-2024-28000 Scan optional arguments: -h, --help show this help...

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

CVE-2024-23897-Jenkins-4.441

CVE-2024-23897 - Jenkins 任意文件泄露 编译 root@kitploit: g++ CVE-2024-23897.cpp -o exploit 使用方法 root@kitploit: /exploit -u http://10.10.10.10 -f /etc/passwd...

CVE-2024-14027_slop

CVE-2024-14027 - SlopSploit エクスプロイトは、Qemu Debian インストール上の 6.6.51 でテストされました。 exploit.c - シャドウファイルを漏洩します。 exploitdc.c - ダブルクローズ手法を用いてルートシェルを取得するデモです。 WRITEUP.md - LLM が生成した解説です。 これは、LLM（Opus 4.6）を用いて、解放された同一タイプのオブジェクトを再割り当て・再利用できることに起因する、ユニークな種類のカーネル脆弱性を悪用する実験でした（grsecurity による詳細）。 この結果は、LLM...

EUVD-2026-62902

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript files outside the Splunk Web static directory. The vulnerability is possible because Splunk Web does not restrict static file requests to the configured static directory...

CVE-2026-75914

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the image_analyze tool. The root cause is a failure to canonicalize symlinks before reading files, allowing an attacker to create workspace symlinks pointing to external files with image extensions. This enables arbitrary ...

CVE-2026-75914

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the imageanalyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without use...

CVE-2026-75914 CodeWhale before 0.8.64 Path Traversal via image_analyze symlink

CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the imageanalyze tool that fails to canonicalize symlinks before reading files. Attackers can create workspace symlinks pointing to external files with image extensions to leak file bytes to the vision endpoint without use...

CVE-2026-19474

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

EUVD-2026-59761

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-19474 @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-19474

The CVE-2026-19474 entry concerns @fastify/multipart, affecting versions 3.0.0 up to but not including 10.1.1. The root cause is that request.saveRequestFiles() can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts; the iterato...

CVE-2026-19474

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-19474 @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

CVE-2026-18549 @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...