Enlogic SCADA Virtual Controller Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files...

CVE-2024-23897

CVE-2024-23897: Jenkins Arbitrary File Read Vulnerability Leading to RCE Introduction This repository contains a Python script that exploits a critical vulnerability CVE-2024-23897 in Jenkins, leading to arbitrary file read and remote code execution RCE. This vulnerability allows an unauthenticat...

CVE-2024-24919

Check Point Security Gateway RCE Exploit Tool CVE-2024-24919 Overview This repository contains a tool for exploiting the CVE-2024-24919 vulnerability in Check Point Security Gateways. The tool is a multi-scanner that can identify vulnerable devices and a single-target exploit that can take full...

CVE-2025-56499

CVE-2025-56499 Arbitrary File Read via Missing Path Validation in Local Rule Provider Upstream Fix: https://github.com/MetaCubeX/mihomo/pull/2177 Affected Versions: mihomo = v1.19.11 Summary When parsing rule-providers configuration, the type = "file" branch fails to validate the supplied path. A...

CVE-2025-30208

CVE-2025-30208 !IMPORTANT Disclaimer This exploit is for educational and ethical security testing purposes only. The use of this exploit against targets without prior mutual consent is illegal, and the developer disclaims any liability for misuse or damage caused by this exploit. Installation git...

CVE-2024-24919-PoC

CVE-2024-24919-PoC Vulnerability References https://nvd.nist.gov/vuln/detail/CVE-2024-24919 https://censys.com/cve-2024-24919/ https://vulners.com/cve/CVE-2024-24919 https://support.checkpoint.com/results/sk/sk182336 Hotfix About CVE-2024-24919 The vulnerability allows an unauthenticated remote...

CVE-2026-57830

Helix Ultimate Framework — Unauthenticated Path-Traversal Arbitrary File/Folder Read+Delete This is a confirmed DoS + cross-tenant filesystem access vulnerability, NOT RCE. An RCE-escalation theory delete configuration.php to re-expose the Joomla installer was tested live and disproved — see "RCE...

Cisco-ASA-FTD-Web-Services-Traversal

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability CVE-2020-3452 Usage: CVE-2020-3452.py https://target Vulnerability description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Softwar...

CVE-2024-34102

CVE-2024-34102 POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce. Overview This POC will attempt to read files from target hosts that are vulnerable to the recent Magento / Adobe Commerce CVE-2024-34102. This POC is based on this security advisory...

CVE-2022-45451

Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...

CVE-2021-43798

Grafana CVE-2021-43798 Exploit Overview This repository demonstrates the exploitation of CVE-2021-43798, a directory traversal vulnerability in Grafana. This vulnerability allows attackers to read arbitrary files on the server. CVE Details CVE : CVE-2021-43798 Description : Directory traversal...

CVE-2023-2825

CVE-2023-2825 Unauthenticated Directory traversal leads to file read. Summary of the CVE An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment...

CVE-2023-49031

LFI Tikit eMarketing CVE-2023-49031 Discovery On November 2023, a novel local file inclusion vulnerability was identified in the “eMarketing” platform developed by Tikit now Advanced during a client engagement. This issue was resolved with Advanced on February 2024 Affected Versions This...

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability USAGE: python3 CVE-2019-11510.py...

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository contains a Markdown analysis report for CVE-2020-1938 Ghostcat and the image assets used in the report. Contents Report: docs/report/CVE-2020-1938-Analysis-Report.md Images: docs/images Report Scope The report is organized around:...

UPnPHostFileRead

Description Local arbitrary file read PoC exploit for the Windows UPnP Device Host service. Reads an arbitrary file in the context of LOCAL SERVICE. Tested against Windows 11 Pro build 26200.8457. Reported to Microsoft. Assessed as "not a vulnerability". How to Build 1. Clone the repository. 2...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

CVE-2024-20767

CVE-2024-20767 CVE-2024-20767 - Arbitrary file system read using an Improper Access Control vulnerability in Adobe ColdFusion Please refer to ma4ter blogpost for more information: Adobe ColdFusion任意文件读取漏洞CVE-2024-20767分析 Products and Versions affected: Product| Affected Versions ---|--- ColdFusio...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability CVE-2020-1938 with advanced features for penetration testing and security research. 🔍 Overview The Ghostcat vulnerability CVE-2020-1938 allows attackers to read arbitrary files fr...

CVE-2026-37107

CVE-2026-37107: HTMLy v3.1.1 — Authenticated SSRF via getfeed Leads to Arbitrary File Read php://filter / file:// and Internal Network Probing CVE ID : CVE-2026-37107 Product : HTMLy https://www.htmly.com/ Affected Version : v3.1.1 latest release at time of discovery,...