wordpress-snapcreek

wordpress-snapcreek snapcreekduplicator vulnerabilidad de lectura de archivos https://www.cvedetails.com/cve/CVE-2020-11738/ Paso 1: Abrir MSFconsole: y usar wordpressscanner para encontrar todos los plugins utilizados por la máquina objetivo. PASO 2: Ataque usando script de Python:...

CVE-2024-23897

CVE-2024-23897 Jenkins 2.441 y anteriores, LTS 2.426.2 y anteriores no deshabilitan una función de su analizador de comandos CLI que reemplaza un carácter '@' seguido de una ruta de archivo en un argumento con el contenido del archivo, permitiendo a atacantes no autenticados leer archivos...

CVE-2021-41773

CVE-2021-41773 versión apache 2.4.49 PoC simple Cómo usar el script chmod +x apache.sh ./apache.sh ejemplo ./apache.sh http://127.0.0.1 etc/passwd...

CVE-2019-11510-PulseVPN

CVE-2019-11510-PulseVPN Pulse Secure Pulse Connect Secure PCS 8.2 से पहले 8.2R12.1, 8.3 से पहले 8.3R7.1, और 9.0 से पहले 9.0R3.4 में, एक अप्रमाणित दूरस्थ हमलावर एक विशेष रूप से तैयार URI भेजकर मनमाना फ़ाइल पढ़ने की कमजोरी का फायदा उठा सकता है। exploit.sh = कमजोरी का पता लगाना। detect-pulse.sh = IP...

CVE-2024-23897-Arbitrary-file-read

🤵🏻 CVE-2024-23897 Arbitrary-file-read 🤵🏻 Versiones afectadas: Jenkins 2.441 y anteriores. Jenkins LTS 2.426.2 y anteriores. Un script realizado en python para atumatizar la vulnerabilidad CVE-2024-23897 🤖 🛠️ Este código Python presenta un escáner para una vulnerabilidad específica CVE-2024-23897 en...

CVE-2026-73760 Authenticated Path Traversal Vulnerability Leads to Remote Unauthorized Access to Files in AOS-CX

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files...

EUVD-2026-69624

An authenticated Path Traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to read arbitrary files from the web-based management interface of the underlying operating system, which could lead to remote unauthorized access to files...

CVE-2026-73760

An authenticated Path Traversal vulnerability in HPE AOS-CX allows an attacker with low privileges to read arbitrary files from the web-based management interface of the underlying operating system, potentially leading to remote unauthorized access to files. The CVSS 3.1 score is 6.5 (Medium) wit...

CVE-2025-68705

CVE-2025-68705 - Exploit de Path Traversal en RustFS Descripción Este script explota una vulnerabilidad de path traversal CVE-2025-68705 en RustFS que permite leer archivos arbitrarios en el servidor. Requisitos Python 3.6+ Consulta requirements.txt para las dependencias Instalación root@kitploit...

CVE-2021-27905.POC

CVE-2021-27905.POC POC for LFI related to CVE-2021-27905 POC for apache-solr-file-read nuclei template Use traverse.sh path For example, using /root as path, will display the content of all files recursively ./traverse.sh /root It's also possible to traverse and get the content of every file on t...

CVE-2022-36203

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:25+00:00| seen| https://t.me/hackingAttack/67590 2026-09-02 01:01:39+00:00| seen| https://t.me/hackingAttack/67590 2026-09-05 11:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/67590 2026-09-06 00:00:50+00:00|...

CVE-2026-65400

CVE-2026-65400 Donar Apoya el mantenimiento de este proyecto con PayPal o escaneando el código QR a continuación. ⚡ Uso Simple Usa este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas ...

CVE-2023-1177-PoC-reproduce

MLflow CVE-2023-1177 - PoC & Reproduce This repository contains Proof-of-Concept PoC exploit code and instructions to reproduce the Local File Inclusion LFI vulnerability in MLflow, identified as CVE-2023-1177. Vulnerability Information: CVE ID: CVE-2023-1177 Vulnerability Type: Local File...

CVE-2024-55557

CVE-2024-55557 Uso root@kitploit: python3 exploit.py --local retrieve from local readable files python3 exploit.py default mode is remote Más Leer más sobre CVE-2024-55557 - Weasis 4.5.1 POC https://github.com/user-attachments/assets/a3f64a58-7720-4f93-8bcc-9393d8afcb68...

CVE-2026-73741 Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level...

CVE-2026-73741

HPE Networking Fabric Composer contains a vulnerability in its API that allows an authenticated low-privilege operator user to read certain system files beyond their authorized privilege level. The resulting impact is a limited confidentiality breach , with no integrity or availability effects, r...

EUVD-2026-69463

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory...

CVE-2026-73736

CVE-2026-73736 is an unauthenticated information disclosure vulnerability in the web-based management interface of HPE Networking Fabric Composer . A remote attacker with no prior authentication can view and read files within an affected directory, leading to potential data exposure. The CVSS v3....

CVE-2021-31800-Impacket-SMB-Server-Arbitrary-file-read-write

CVE-2021-31800 - Servidor SMB de Impacket: lectura/escritura arbitraria de archivos Vector CVSS : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Puntuación CVSS : 9.9 Crítico Descripción Un path traversal en smbserver.py permite a un atacante leer/escribir archivos arbitrarios en el servidor...

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE Injection ⚠️ DISCLAIMER THIS TOOL IS EXCLUSIVELY FOR EDUCATIONAL AND RESEARCH PURPOSES This exploit is intended exclusively for authorized red team operations, penetration testing, and security research on systems where you have explicit written...