CVE-2024-20767

CVE-2024-20767 CVE-2024-20767 - Arbitrary file system read using an Improper Access Control vulnerability in Adobe ColdFusion Please refer to ma4ter blogpost for more information: Adobe ColdFusion任意文件读取漏洞CVE-2024-20767分析 Products and Versions affected:...

cve-2017-7374

cve-2017-7374 भेद्यता को ट्रिगर करने के लिए, हमें एन्क्रिप्शन समर्थन के साथ एक ext4 फ़ाइल सिस्टम की आवश्यकता होती है और एक एन्क्रिप्टेड निर्देशिका बनानी होती है।...

winfsp

WinFsp · Proxy de Sistema de Arquivos do Windows O WinFsp permite que desenvolvedores criem seus próprios sistemas de arquivos por exemplo, "unidades do Windows" como programas em modo de usuário, sem qualquer conhecimento de programação de kernel do Windows. Ele é semelhante ao FUSE Filesystem i...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 Mostre seu apoio - dê uma ⭐️ se você gostou do conteúdo | COMPARTILHE no Twitter | Siga-me no CVE-2022-0337 Vazamento de variáveis de ambiente do sistema no Google Chrome, Microsoft Edge e Opera 📝 Descrição A exploração bem-sucedida dessa vulnerabilidade pode levar ao vazamento dos segredos do...

CVE-2021-21123-PoC-Google-Chrome

📝 Beschreibung Google Chrome - File System Access API - von Maciej Pulikowski gemeldete Schwachstellen Gesamte Bug-Bounty-Belohnung: $5.000 Dies ist ein Proof of Concept für: Google SecuritySeverity CVE HOCH CVE-2021-21123 MITTEL CVE-2021-21129 MITTEL CVE-2021-21130 MITTEL CVE-2021-21131 MITTEL...

log4j-detector

Log4j-detector Scanner che rileva versioni vulnerabili di Log4J per aiutare i team a valutare la loro esposizione a CVE-2021-44228 CRITICA, CVE-2021-45046, CVE-2021-45105 e CVE-2021-44832. Può cercare istanze di Log4J esaminando attentamente l'intero file-system, incluse tutte le applicazioni...

analyzeMFT

AnalyzeMFT Stato : tutti i test superati su Python 3.8-3.12 in ambienti Windows, macOS e Linux. Avvio rapido root@kitploit: Installazione pip install analyzeMFT Utilizzo base python analyzeMFT.py -f MFTFILE -o output.csv --csv Genera un MFT di test per le prove python -c "from...

EUVD-2026-67161

libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.jointempDir.name, fileName without reducing it to a base name. A filename containing ../ can escape the temporary...

CVE-2022-26937

Crash PoC del File System di Rete Windows CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical dat...

Disk-Arbitrator

Introduzione Disk Arbitrator è un'utilità forense per Mac OS X progettata per aiutare l'utente a garantire che le corrette procedure forensi vengano seguite durante l'acquisizione di un dispositivo disco. Disk Arbitrator è essenzialmente un'interfaccia utente per il framework Disk Arbitration, ch...

LovelySn0w

LovelySn0w. Ein iOS CVE-2018-4150 Anwendungsbeispiel. Sollte dies nicht in XCode kompilieren, schreibt mir bitte auf Twitter. Es ist wahrscheinlich mein Fehler! Es ist derzeit noch nicht fertig. Falls du root@kitploit: //ACPV ›Some version ... gefunden hast und du von der PS4-Szene kommst und...

CVE-2022-22029-NFS-Server-

Vulnerabilità di esecuzione remota di codice nel file system di rete di Windows CVE-2022-22039 Per sfruttare con successo questa vulnerabilità, un attaccante deve vincere una condizione di race. Una chiamata non autenticata e costruita con cura a un servizio Network File System NFS potrebbe esser...

EUVD-2026-67130

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...

CVE-2025-30208

🔥 Scanner di Vulnerabilità di Lettura Arbitraria di File Vite CVE-2025-30208 Scanner di vulnerabilità avanzato per CVE-2025-30208 con funzionalità di livello enterprise Strumento professionale di penetration testing per il rilevamento della vulnerabilità di lettura arbitraria di file in Vite 🚀...

CVE-2020-0753-and-CVE-2020-0754

Writeup e POC per CVE-2020-0753, CVE-2020-0754 e sei vulnerabilità DOS di Windows non corrette Exploit del bug di race condition nel FileSystem - analisi di CVE-2020-0753 e CVE-2020-0754 Il servizio Windows Error Reporting ha corretto 2 bug di Elevation of Privilege nell'ultimo Patch Tuesday; ai...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Vite Dev Server - Information Exposure

Vite is a frontend tooling framework for JavaScript. Before versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network using...