CVE-2024-4040-CrushFTP-server

CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi-protocol, multi-platform file transfer server. CVE-2024-4040 - A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read any...

CVE-2024-23897

CVE-2024-23897 - Jenkins Arbitrary File Read Exploit Tool Installation CVE-2024-23897 requires go 1.21 to complete installation. Execute the following command: root@kitploit: go install github.com/wjlin0/CVE-2024-23897/cmd/CVE-2024-23897@latest Or download the pre-built binary from release...

CVE-2019-17662

CVE-2019-17662 विवरण ThinVNC 1.0b1 मनमानी फ़ाइल पढ़ने के लिए संवेदनशील है, जो VNC सर्वर से समझौता करने की ओर ले जाता है। यह भेद्यता तब भी मौजूद होती है जब VNC सर्वर की तैनाती के दौरान प्रमाणीकरण चालू किया गया हो। प्रमाणीकरण के लिए पासवर्ड एक फ़ाइल में स्पष्ट पाठ में संग्रहीत किया जाता है जिसे...

CVE-2026-22812-POC

OpenCode CVE-2026-22812 Exploiter Simple Python tols to check and exploit OpenCode vulnerability CVE-2026-22812. Install root@kitploit: git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse concurrent-log-handler colorama Basic...

nakivo-arbitrary-file-read-poc-CVE-2024-48248

CVE-2024-48248 NAKIVO बैकअप और रेप्लिकेशन समाधान: बिना प्रमाणीकरण के मनमानी फ़ाइल रीड का प्रूफ ऑफ कॉन्सेप्ट तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें डिटेक्शन इन एक्शन root@kitploit: python3 watchtowr-vs-nakivo-arbitrary-file-read-poc-CVE-2024-48248.py --url https://192.168.1.1:4443 --file...

CVE-2024-50623

CVE-2024-50623 Cleo असीमित फ़ाइल अपलोड और डाउनलोड PoC CVE-2024-50623 मनमानी फ़ाइल लेखन root@kitploit: python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | ...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitrary File Read See our blog post for technical details root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab...

CVE-2021-43798

CVE-2021-43798 Grafana पर डायरेक्टरी ट्रैवर्सल और मनमानी फ़ाइल पढ़ना लेखक: Wagner Alves - रेड टीम विश्लेषक यह एक्सप्लॉइट Grafana 8.0 - 8.3 में डायरेक्टरी ट्रैवर्सल और मनमानी फ़ाइल पढ़ने की कमजोरियों का लाभ उठाता है, जिससे यह /etc/passwd, /etc/hosts, /home/user/.ssh/idrsa, /etc/os-release और अन्य...

CVE-2024-38819-POC2

CVE-2024-38819: Proof of Concept PoC This is a proof of concept for the CVE-2024-38819 vulnerability, which I reported, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 root@kitploit: cd vuln docker build -t...

CVE-2024-23897

Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the args4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature that replaces an @ character...

grafana-exploit-CVE-2021-43798

grafana-exploit-CVE-2021-43798 About What is this exploit used for ? used for the Grafana Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798 allows access to local files using directory traversal What grafana versions will this exploit work for? will work for Grafana versions 8.0.0-bet...

CVE-2026-39363

CVE-2026-39363 Vite Dev Server WebSocket Arbitrary File Read Vulnerability Vulnerability Overview...

CVE-2024-23897

Read first 3 lines of any file with read permission for current user on the system. The script is using proxychains internally. Usage: python CVE-2024-23897.py Example: python CVE-2024-23897.py /mnt/hgfs/Share/jenkins-cli.jar http://10.10.14.8:8080/ /var/lib/jenkins/secrets/master.key...

cve-2020-10977

CVE-2020-10977 GitLab 12.9.0 Arbitrary File Read Target : 12.9.0 and below Tested : GitLab 12.8.1 In a recent engagement I found a GitLab instance on the target, I found a PoC on Exploit-DB but it uses LDAP for authentication and it was disabled in this case, so I created this python script which...

CVE-2024-42992

CVE-2024-42992 Python Pip Pandas v2.2.2 has been found to contain an arbitrary file Pip Pandas all versions - =2.2.2 An arbitrary file read vulnerability exists in the "pandas" library, allowing an attacker to read any file in the file system without restrictions. This vulnerability enables...

CVE-2021-41277

CVE-2021-41277 PoC Metabase is an open source data analytics platform. Local File Inclusion issue has been discovered in some versions of metabase. Here is the PoC code in order to determine the target has this vulnerability or not. An adversary could read arbitrary files in metabase server. Buil...

CVE-2023-40028

Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a vulnerability in Ghost CMS that allows arbitrary file reads through improper file handling. This PoC demonstrates how the exploit works under controlled conditions. Educational use only. Reference: Adapted from the original PoC by...

docker-cve-2022-39253-poc

docker host file read using cve-2022-39253 poc PoC reproduce environment root@kitploit: $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starti...

CVE-2021-21402

CVE-2021-21402 Jellyfin Arbitrary File Read Vulnerability Overview Jellyfin is a free software media system that controls and manages media and streaming. It is an alternative to Emby and Plex, delivering media from a dedicated server to end-user devices through multiple applications. Jellyfin...

CVE-2025-1094-Exploit

CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repository contains a proof of concept PoC exploit for CVE-2025-1094 , a vulnerability in PostgreSQL that allows an SQL Injection SQLi attack to escalate to Remote Code Execution RCE through WebSocket hijacking. Overview This exploit...