CVE-2026-36227

CVE-2026-36227: PoC de traversée de chemin UserName dans Easy Chat Server 3.1 Ce dépôt contient une preuve de concept bénigne pour CVE-2026-36227, un problème de traversée de chemin dans la gestion des inscriptions utilisateur d'Easy Chat Server 3.1. Ce dépôt est destiné uniquement à la recherche...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal & Arbitrary File Write Authenticated This repository contains a Proof of Concept PoC exploit for CVE-2026-6815, an arbitrary file write and path traversal vulnerability in Casdoor. The vulnerability has been fixed in version 3.54.1...

PT-2026-104813

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

PT-2026-106247

Name of the Vulnerable Software and Affected Versions Docling versions 2.94.0 through 2.131.0 Description When users enable LatexBackendOptionstikz engine="tectonic", the system uses docling/backend/latex/engines/tectonic.py to compile TikZ bodies and document preambles without restricting TeX fi...

Linux Distros Unpatched Vulnerability : CVE-2026-63266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded...

CVE-2026-7791

CVE-2026-7791 PoC: Privileged by Default Research proof-of-concept for local privilege escalation in Amazon WorkSpaces TOCTOU + SYSTEM-level arbitrary file write in the Skylight Workspace Config Service. Full technical details: Cymulate blog | ---|--- CVE| CVE-2026-7791 Vendor| AWS Security...

CVE-2026-27876

CVE-2026-27876: SQL-выражения Grafana — произвольная запись файлов с эскалацией до RCE CVSS 9.1 Critical | Произвольная запись файлов | Удалённое выполнение кода Демонстрация https://github.com/user-attachments/assets/c84a4b63-7928-4dba-a069-3bafa036ce56 Краткое описание Функция SQL-выражений...

CVE-2025-8110

CVE-2025-8110 — Traversée de lien symbolique dans Gogs → RCE Vue d'ensemble CVE-2025-8110 est une vulnérabilité critique dans Gogs service Git auto-hébergé versions = 0.13.3. L'API PutContents valide les chemins de fichiers contre la traversée de répertoire ../ mais ne résout pas les liens...

FortiLPE

Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...

cve-2025-4615

CVE-2025-4615 — Technical Analysis & Proof of Concept Vulnerability: Improper Neutralization of Input in PAN-OS Management Web Interface Vendor Advisory: https://security.paloaltonetworks.com/CVE-2025-4615 CVSS 4.0: 6.9 MEDIUM — Integrity HIGH, Availability HIGH CWE: CWE-83 Improper Neutralizatio...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write Vulnerability fontTools is a Python library for manipulating font files. Its varLib module processes .designspace files — an XML format that describes how multiple font masters should be interpolated to produce a variable font. Two weaknesses...

CVE-2025-11001---7-Zip

CVE-2025-11001 - 7-Zip High-severity symlink traversal in 7-Zip allowing arbitrary file write / RCE Patched in 7-Zip 25.00 July 2025 – Public exploit available FOR AUTHORIZED SECURITY TESTING AND RESEARCH ONLY -critical Vulnerability Summary CVE : CVE-2025-11001 CVSS v3.1 : 7.0 High –...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...

printDemon2system

printDemon2system CVE-2020-1048 PrintDemon privilege escalation to SYSTEM PrintDemon was a logic vulnerability in the Windows Print Spooler service spoolsv.exe. The vulnerability was in the way the spooler handled print jobs to files, and when exploited allowed arbitrary writing to the file syste...

CVE-2016-4971

CVE-2016-4971 CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit Wget 1.18 Arbitrary File Upload Exploit AND Wget 1.14-13.el7 Arbitrary File Upload Exploit Modifications by: mbadanoiu Original Exploit Dawid Golunski dawid at legalhackers.com...

CVE-2025-8088

CVE-2025-8088 : WinRAR Path Traversal via NTFS ADS Abuse 📌 Executive Summary CVE-2025-8088 is a critical path traversal vulnerability in WinRAR versions 7.12 and prior. The flaw exists in the way the application processes archive entry filenames that utilize NTFS Alternate Data Streams ADS. By...

CVE-2023-4220

Chamilo LMS Unauthenticated Remote Code Execution Exploit CVE-2023-4220 Overview This repository contains a Bash script that exploits an unauthenticated remote code execution RCE vulnerability in Chamilo LMS via arbitrary file write. The vulnerability is identified as CVE-2023-4220. This exploit...

CVE-2025-8088

Technical Deep Dive: CVE-2025-8088 - The Resilient Path Traversal Disclaimer: This content is for educational and research purposes only. Do not use this information for any malicious activities. Today, we're taking a deep dive into a fascinating path traversal vulnerability, tracked as...

Poc-CVE-2024-21542

Poc-CVE-2024-21542 Overview luigi is a package that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization, handling failures, command line integration, and much more. Affected versions of this package are vulnerable to Arbitrary File...

WP-CVE-2016-10033

WordPress The 8000 before the colon represents the host machine's port; it can be set arbitrarily. Visit http://127.0.0.1:8000 and see the WordPress main interface to indicate a successful start POC Assuming the target address is: http://127.0.0.1:8000/ 1. Copy the following HTTP request into...