CVE-2025-30208

CVE-2025-30208 A PoC del script de explotación para la vulnerabilidad de Lectura Arbitraria de Archivos de Vite /@fs/ Path Traversal en transformMiddleware CVE-2025-30208. Se puede consultar el análisis detallado en este post. Vulnerable en versiones anteriores a : 6.2.3 6.1.2 6.0.12 5.4.15 4.5.1...

CVE-2026-36851

CVE-2026-36851 Path traversal / arbitrary file read in UnPoller v2.33.0 via the file:// password prefix. File contents are read from disk and transmitted to the configured UniFi controller URL during authentication. | ---|--- CVE| CVE-2026-36851 Product| UnPoller v2.33.0 earlier versions likely...

CVE-2026-75855

Title Path Traversal in "create database" / "drop database" server commands allows arbitrary file write and delete outside the configured database directory Summary The POST /api/v1/server endpoint's create database and drop database commands use the caller-supplied database name to build a...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Inclusión de Archivos Locales Description : El Customer Support System 1.0 es vulnerable a la Inclusión de Archivos Locales. Un usuario autenticado tiene la capacidad de acceder y leer archivos PHP del sistema operativo explotando una vulnerabilidad de...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Control de acceso incorrecto - Listado de directorio Descripción : Una vulnerabilidad de listado de directorio en School Fees Management System v1.0 permite a los atacantes enumerar directorios y archivos sensibles dentro de la aplicación sin...

CVE-2021-29447

CVE-2021-29447 POC para explotar la inyección XXE autenticada en WordPress 5.6-5.7 PHP 8+. Más información sobre este CVE aquí Ejemplo Ejemplo de uso contra la máquina MetaTwo de HackTheBox, que aloja un sitio web de WordPress con la biblioteca de medios vulnerable a la inyección XXE. python lfi....

CVE-2026-97023 Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is...

CVE-2026-97023

A path traversal vulnerability exists in Flatpak during the handling of the export/bin directory during app deployment. This flaw allows a malicious Flatpak app to trigger the deletion of arbitrary files outside the deployment directory when an app is installed or upgraded. Notably, in system-wid...

CVE-2026-97023 Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the app is installed or upgraded. In system-wide installations, the deletion is...

CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...

CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...

CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...

CVE-2026-13018

A flaw in the video codecs component of Google Chrome (prior to version 147.0.7727.55) and chromium-browser allows a remote attacker to perform out-of-bounds memory access . This is caused by insufficient validation of untrusted input when processing a specially crafted video file. Successful exp...

EUVD-2026-88441

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...

CVE-2020-14882

Gracias a NS-Sp4ce, Jas502n, s1kr10s, demon, 斯文 Referencias: https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and...

CVE-2016-5639

CVE-2016-5639 Módulos de Metasploit para Crestron AirMedia AM-100: Traversal y Hashdump Dos módulos similares que aprovechan CVE-2016-5639 para volcar hashes y recuperar archivos mediante traversal de rutas. Hice estos módulos por separado porque quería experiencia escribiendo algo que pudiera...

Node.js-CVE-2024-39943

Vulnerabilidad de ejecución de comandos en HFS basado en Node.js CVE-2024-39943 Escuela White Hat 3ª promoción – 노정민 @JenmrR Resumen En el entorno del servidor HFS basado en Node.js, existe una vulnerabilidad que ejecuta el contenido de los archivos subidos mediante childprocess.execSync. Un...

CVE-2024-1302---Badgermeter-moni-tool-Sensitive-information-exposure

CVE-2024-1302 --- Badgermeter moni tool - Exposición de información sensible https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1302: 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CWE-200. Enlace del software :...

CVE-2020-1938-MSF-MODULE

CVE-2020-1938-MSF-MODULE Versión modificada de auxiliary/admin/http/tomcatghostcat, Lee cualquier archivo Sobrescribe el archivo /metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb y reinicia msfconsole para ejecutar reloadall. Luego puedes usar el módulo...

CVE-2026-97686

Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory resource leak. Specific system call arguments can cause the IPNET subsystem to fail to release allocated kernel memory and system file descriptors before the calling application terminates. This issue can lead to a high impact ...