CVE-2024-23334

CVE-2024-23334 !IMPORTANT Gardez à l'esprit que parfois aiohttp peut être configuré dans un autre dossier et non dans le dossier static, si c'est le cas, modifiez la valeur de la variable folder dans le script. Comment utiliser l'exploit !CAUTION Avertissement : Ce script est conçu pour des...

Powershell-Tools

PSUnzipper - PowerShell Unzipper Использует SharpZipLiB в .NET, загружаемый во время выполнения без файла на диске - ссылка: https://github.com/icsharpcode/SharpZipLib Может использоваться с паролем zip, unzip Поддерживаются оба метода шифрования: AES и ZipCrypto. При архивации/разархивации -...

CVE-2024-23334-PoC

CVE-2024-23334-PoC Ce dépôt est une preuve de concept POC pour CVE-2024-23334, démontrant une tentative de reproduction du bogue dans aiohttp qui conduit à une inclusion de fichier local LFI. !CAUTION Avertissement : Cette POC est uniquement à des fins éducatives. NE PAS l'utiliser dans des...

CVE-2025-6218-POC

CVE-2025-6218 Проверка концепции POC Обзор Этот репозиторий содержит простую проверку концепции POC для CVE-2025-6218 , демонстрирующую эксплуатацию уязвимости, связанной с обработкой путей извлечения архивов в WinRAR. POC-скрипт создаёт ZIP-архив, который помещает пакетный файл в папку...

FluentD-TD-agent-Exploit-CVE-2020-28169

FluentD-TD-agent-WindowsExploit V4.0.1 CVE-2020-28169 Небезопасные разрешения папки, ведущие к повышению привилегий Ссылка для загрузки: https://td-agent-package-browser.herokuapp.com/4/windows...

CVE-2026-100372

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

CVE-2026-100372

ClipBucket v5 versions prior to 5.5.3-#197 are vulnerable to a path traversal vulnerability within the admin template editor. Authenticated users with manage_template_access permissions can exploit the folder parameter by providing directory traversal sequences to move outside the layout director...

EUVD-2026-87315

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

CVE-2026-100372 ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

CVE-2026-100372 ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

EUVD-2026-86481

Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Fold...

CVE-2026-84283

Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Fold...

PT-2026-99100

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-197 Description A path traversal issue exists in the admin template editor. Authenticated administrators with manage template access permission can use directory traversal sequences in the folder parameter to...

CVE-2026-84283: Insecure Storage of Sensitive Information

Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Fold...

CVE-2026-100372: Improper Limitation of a Pathname to a Restricted Directory

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

CVE-2026-84283

In FluteCode Secure Folder 1.2 , files designated for the password-protected vault are stored as unencrypted files within the Android shared-storage tree . This flaw allows a local application or file manager with access to the relevant shared-storage path to enumerate, copy, and open these files...

CVE-2026-84283 FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate

Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Fold...

CVE-2026-84283 FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate

Secure Folder 1.2 stores files selected for its password-protected vault as unencrypted files in the Android shared-storage tree. A local application or file manager that has access to the relevant shared-storage path can enumerate, copy, and open those files without authenticating to Secure Fold...

PT-2026-98315

Name of the Vulnerable Software and Affected Versions Secure Folder version 1.2 Description Files selected for the password-protected vault are stored as unencrypted files within the Android shared-storage tree. This allows a local application or file manager with access to the shared-storage pat...

CVE-2026-77605

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...