CVE-2025-30208-PoC

CVE-2025-30208 - Vite Arbitrary File Read PoC This is a Proof-of-Concept PoC script to exploit CVE-2025-30208, allowing arbitrary file reads on Vite development servers. Vulnerability Details Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2,...

CVE-2025-30208

CVE-2025-30208 — Vite Arbitrary File Read · v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Severity: CVSS 5.3 Medium network-accessible dev server ⚠ For authorized security engagements only. Unauthorized use against systems you do not own or have explicit written permission to test is illegal...

CVE-2025-30208

CVE-2025-30208 A PoC of the exploit script for the Arbitrary File Read vulnerability of Vite /@fs/ Path Traversal in transformMiddleware CVE-2025-30208. Detailed analysis can be refer to this post. Vulnerable in versions prior to : 6.2.3 6.1.2 6.0.12 5.4.15 4.5.10 Overview Vite is a popular...

ns2jb

Thank you Codex for dutifully packaging the exploits for distribution. No, I have not read the distributed package. Switch 2 FS demo Runs two small native functions inside FS, checks their results, and restores the original instructions. Switch 2 only; no npm install or compiler needed. You need...

CVE-2026-46242-Analysis

CVE-2026-46242 — Linux Kernel eventpoll epremove Race UAF Nested epoll Reproducer / PoC trigger-verification type : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices ; it contains no privilege-escalation/exploitati...

Vitejs-exploit

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Muhammad Waseem. Usage: python viteexploit.py -u http://target.com python viteexploit.py...

ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

CVE-2026-129161

Dromara free-fs 2.0.1 through 2.3.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute-force six-digit password reset codes via PUT /apis/user/forget-password. Attackers can request a code for a known email and submit unlimited...

CVE-2026-128070

Nuxt is an open-source web development framework for Vue.js. From 3.5.0 until 4.6.4, Nuxt can choose a parent directory as the default workspaceDir in either of two cases: a stray parent lockfile when the project is outside a Git repository and has no workspace file above it, or a parent pnpm or...

EUVD-2026-125607

free-fs 2.0.1 through 2.3.1 contains an SQL injection vulnerability in FileShareServiceImpl.getPages, which passes the orderBy parameter of the /apis/share/pages endpoint verbatim into the ORDER BY clause via MyBatis-Flex without a column whitelist. Authenticated users can supply CASE WHEN subque...

CVE-2026-129160

The Dromara free-fs software (versions 2.0.1 through 2.3.1 ) is vulnerable to an SQL Injection within the FileShareServiceImpl.getPages method. The application passes the orderBy parameter from the /apis/share/pages endpoint directly into a MyBatis-Flex ORDER BY clause without utilizing a column ...

CVE-2026-129161

Dromara free-fs versions 2.0.1 through 2.3.1 are vulnerable to an improper restriction of authentication attempts (CWE-307). An unauthenticated attacker can exploit this by requesting a six-digit password reset code via PUT /apis/user/forget-password for a known email address. Due to the lack of ...

EUVD-2026-125606

Dromara free-fs 2.0.1 through 2.3.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute-force six-digit password reset codes via PUT /apis/user/forget-password. Attackers can request a code for a known email and submit unlimited...

CVE-2026-129161 Dromara free-fs 2.0.1 through 2.3.1 Password Reset Code Brute-Force Account Takeover

Dromara free-fs 2.0.1 through 2.3.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute-force six-digit password reset codes via PUT /apis/user/forget-password. Attackers can request a code for a known email and submit unlimited...

CVE-2026-129162

Dromara free-fs versions 2.0.1 through 2.3.1 contain a missing authentication vulnerability in the FileStreamController.preview component. This flaw allows unauthenticated attackers to download any user's or workspace's stored files by requesting the /api/file/stream/preview/{fileId} endpoint. To...

EUVD-2026-125605

Dromara free-fs 2.0.1 through 2.3.1 contains a missing authentication vulnerability in FileStreamController.preview that allows unauthenticated attackers to download stored files. Attackers who obtain a file ID from share listings or preview links can request /api/file/stream/preview/fileId to...

CVE-2026-129163

The software Dromara free-fs (versions 2.0.1 through 2.3.1 ) is vulnerable to a stored cross-site scripting (XSS) flaw in the file preview endpoint. The issue occurs because the application allows registered users to upload HTML files that are served inline as text/html. An attacker can provide a...

EUVD-2026-125603

Dromara free-fs 2.0.1 through 2.3.1 contains an authorization bypass vulnerability that allows attackers to access code-protected shares because share codes are enforced only client-side. Attackers knowing a share ID can call the share items and download endpoints to list and download files witho...

EUVD-2026-125604

Dromara free-fs 2.0.1 through 2.3.1 contains a stored cross-site scripting vulnerability that allows registered users to run script by uploading HTML files served inline as text/html. Attackers can send a victim the /api/file/stream/preview/fileId link to execute script in the application origin,...

CVE-2026-129164

Dromara free-fs versions 2.0.1 through 2.3.1 are vulnerable to an authorization bypass because share codes are only enforced on the client-side. Attackers who possess a share ID can directly call the share items and download endpoints to list and download files without providing the required code...