ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

CVE-2025-25612

CVE-2025-25612: Switch FS S3150-8T2F Vulnerabilidad de Cross Site Scripting XSS Almacenado CVE-2025-25612 FS Inc S3150-8T2F anterior a la versión S3150-8T2F2.2.0D135103 es vulnerable a Cross Site Scripting XSS en la funcionalidad de Configuración de Rango de Tiempo de la interfaz de administració...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Resumen de vulnerabilidades CVE-2025-30208, CVE-2025-31125 y CVE-2025-31486 son vulnerabilidades de lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas vulnerabilidades permiten a un atacante eludir los controles de acceso...

Vitejs-exploit

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Muhammad Waseem. Usage: python viteexploit.py -u http://target.com python viteexploit.py...

Vite-CVE-2025-30208-EXP

CVE-2025-30208 Detection Tool Vulnerability Analysis CVE-2025-30208 is an arbitrary file read vulnerability in the Vite development server. Attackers can read sensitive server files such as /etc/passwd or C:\windows\win.ini by constructing special paths e.g., @fs prefix. This tool supports...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner Yo, this is a dope multi-threaded Python script by keklick1337 to hunt down domains vulnerable to CVE-2025-30208 in Vite. Basically, it checks if you can snag random files via the @fs endpoint with ?raw?? or ?import&raw?? — think /etc/passwd leaks and other juicy...

ADFSDump

ADFSDump A C tool to dump all sorts of goodies from AD FS. Created by Doug Bienstock @doughsec while at Mandiant FireEye. This tool is designed to be run in conjunction with ADFSpoof. ADFSdump will output all of the information needed in order to generate security tokens using ADFSpoof. Detailed...

EUVD-2026-81607

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes...

GHSA-6RH5-QQ4Q-97XH vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

Summary NodeVM's builtin wildcard policy can allow sandboxed code to access fs/promises even when the embedder denies fs. With the following configuration: js require: builtin: '', '-fs', '-childprocess' require'fs' and require'childprocess' are blocked, but require'fs/promises' and...

vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

Summary NodeVM's builtin wildcard policy can allow sandboxed code to access fs/promises even when the embedder denies fs. With the following configuration: js require: builtin: '', '-fs', '-childprocess' require'fs' and require'childprocess' are blocked, but require'fs/promises' and...

CVE-2024-42471-PoC

CVE-2024-42471-PoC tar-fs file write/overwrite vulnerability...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787935638)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787935638 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/mountsetattr: always cleanup mountkattr Make sure that...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_19105)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202519105 advisory. kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry...

ROS-20260930-73-0121

The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0128

The vulnerability of the romfsfillsuper function in the fs/romfs/super.c module of the Linux kernel operating system is related to the lack of checking of the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0135

The vulnerability of the cowfilerangeInline function in the fs/btrfs/inode.c module of the Linux kernel is related to the lack of resource release after the expiration of the license period. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

CVE-2026-8023

CVE-2026-8023 — Travesía de ruta en HTTP static-fs de Zephyr PoC Travesía de ruta sin autenticación en el manejador static-fs del servidor HTTP de Zephyr subsys/net/lib/http cuando se usa coincidencia de recursos comodín CONFIGHTTPSERVERRESOURCEWILDCARD=y con HTTPRESOURCETYPESTATICFS. Afecta tant...

ROS-20260929-73-0194

The vulnerability of the parseapplysbmountoptions function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could all...

ROS-20260929-73-0097

The vulnerability of the smb2getksmbdtcon function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

ROS-20260929-73-0040

The vulnerability of the cifsconstructtcon function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...