411829 matches found
GNUnet P2P Framework 0.26.2
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
CVE-2026-3855
CVE-2026-3855 is an improper control of resource identifiers (resource injection) vulnerability in GitLab CE/EE 's Terraform state upload functionality, caused by improper validation of parameters. An authenticated user with project-level permissions could, under certain conditions, access restri...
EUVD-2026-80098
The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Overwrite in all versions up to, and including, 32.0.1 due to insufficient file path validation in the 'baseUrlForFacebook' parameter. This makes it...
CVE-2026-76555
The WP Import Export Lite WordPress plugin, prior to version 3.9.33 , contains an authenticated sensitive file disclosure vulnerability in its import functionality. A user-supplied file path is read and copied into a publicly accessible directory without proper validation, enabling any user grant...
CVE-2026-76552
The WP Import Export Lite WordPress plugin (versions before 3.9.33 ) fails to validate the type, extension, or content of files retrieved from a user-supplied URL during import. This allows any user with the plugin's import permission to store arbitrary files—including executable ones—on the serv...
CVE-2026-76550
CVE-2026-76550 affects the WP Import Export Lite WordPress plugin in versions before 3.9.34 . The root cause is a lack of validation on a user-supplied output path when writing export files, which the CVELIST entry further characterizes as a path traversal issue. Any user granted the plugin's exp...
TABPE
TABPE ¿Qué es TABPE? TABPE una combinación de TABriz + PE - Tabriz es mi ciudad natal, y nombré este proyecto por mi amor a mi ciudad es un conjunto de datos abierto y estructurado que contiene información sobre todos los archivos PE ejecutables de Windows incluyendo .exe, .dll, .sys, etc., en...
HTTP-Shell
HTTP-Shell HTTP-Shell es una Reverse Shell multiplataforma. Esta herramienta te ayuda a obtener una interfaz tipo shell en una conexión inversa sobre HTTP. A diferencia de otras reverse shells, el objetivo principal de la herramienta es utilizarla junto con Microsoft Dev Tunnels, para obtener una...
antispy
AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...
CVE-2024-48914
This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...
sift
Sift Secrets Credential and sensitive-data exposure triage for file shares. When an open share turns up, the question is never "does this repo have a leaked key". It is "what just got exposed, and what do I have to roll before close of business." sift is built for that question: high recall, a fa...
CVE-2022-1119
CVE-2022-1119 1.Introduction WordPress Simple File List 3.2.8 FileRead POC 2.Usage root@kitploit: poc -f host.txt // Batch scan poc -h 192.168.1.1 // Single scan 3.Disclaimer This tool is only for learning, research, and self-assessment. It should not be used for illegal purposes. Please comply...
CVE-2020-1938
cve-2020-1938 1.read file： python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...
File-Read-CVE-2024-9264
File-Read-CVE-2024-9264 Proof Of Concept for File Read in Grafana CVE-2024-9264 Prerequisites authenticated Grafana user with Viewer permissions or higher DuckDB binary must be installed and accessible through Grafana's PATH Impacted version Grafana = v11.0.0 all v11.x.y are impacted Usage...
CVE-2024-8232
CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability Summary SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts e.g., web shells and gain remote code execution. CVE ID : CVE-2024-8232 Vendor :...
Demo-Exploit-Jackson-RCE
Demo-Exploit-Jackson-RCE Based on the project jackson-rce-via-spel this project serves as an example web application to test multiple attack vectors file upload, forms on the Jackson-databind vulnerability. Introduction Based on an Angular7 frontend and a spring-boot backend different attack...
ShellSweep
ShellSweep ShellSweep: barriendo el mal Por qué ShellSweep "ShellSweep" es una herramienta de PowerShell/Python/Lua diseñada para detectar posibles archivos de web shell en un directorio específico. ShellSweep y su conjunto de herramientas calculan la entropía del contenido de los archivos para...
Wagtail-CMS-XSS
Wagtail-6.4.1-CMS-XSS CVE-2025-45388 Wagtail CMS 6.4.1 Stored XSS CMS Stored XSS Vulnerability PoC Overview This repository demonstrates a Stored XSS vulnerability found in the Wagtail 6.4.1 CMS platform. A malicious JavaScript is embedded in a PDF file, and every time a user clicks on the PDF, a...
hosts
!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...