Lucene search
+L

1181 matches found

Kitploit
Kitploit
added 2026/09/05 5:43 p.m.9 views

CVE-2021-43798

CVE-2021-43798 Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions iss vulnerable to directory traversal, allowing access to local files Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions i...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits45References1
Kitploit
Kitploit
added 2026/09/05 4:23 p.m.5 views

CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability Installation root@kitploit: git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Usage Vulnerable versions...

7.5CVSS7.4AI score0.13641EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/05 10:11 a.m.2 views

CVE-2024-23897

CVE-2024-23897 Nuclei Template For Exploit CVE-2024-23897 This template serves as a crucial warning to all users if the CVE-2024-23897 local file vulnerability is detected within your system, it is imperative to take. immediate action and patch your systems without delay. This vulnerability poses...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits50
Kitploit
Kitploit
added 2026/09/05 10:08 a.m.7 views

CVE-2022-45299

CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...

9.8CVSS8.6AI score0.01349EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/05 5:06 a.m.4 views

CVE-2023-24055

Disclaimer This script is for educational and demonstration purposes only. The author does not endorse or condone the use of this script for any criminal or malicious activities and it should only be used where explicitly allowed with proper permission. This script should be used with caution, as...

5.5CVSS6.1AI score0.03691EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/05 1:55 a.m.4 views

GrafanaDirectoryScanner

PoC for CVE-2021-43798 Grafana is an open-source platform for monitoring and observability. Grafana versions from 8.0.0-beta1 to 8.3.0 except patched versions are vulnerable to directory traversal, allowing access to local files. The vulnerable URL is: /public/plugins//, where is the plugin ID fo...

7.5CVSS8.5AI score0.88503EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/09/03 2:50 p.m.5 views

WebKitGTK-DND-Fix

WebKitGTK-DND-Fix دفتر بحث و CI لاستعادة السحب والإفلات الموثوق للملفات على WebKitGTK و WPE بعد CVE-2025-13947. المشكلة سمح CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg لمحتوى الويب بقراءة محتويات الملفات المحلية عبر السحب والإفلات على WebKitGTK. كان الإصلاح المنبع، bugs.webkit.org 303434،...

7.4CVSS7.4AI score0.00334EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 1:20 a.m.7 views

CVE-2021-43798_exploit

استغلال CVE-2021-43798 Grafana هي منصة مفتوحة المصدر للمراقبة والملاحظة. إصدارات Grafana من 8.0.0-beta1 حتى 8.3.0 باستثناء الإصدارات المُصححة معرضة لثغرة اجتياز الدلائل، مما يسمح بالوصول إلى الملفات المحلية. مسار URL المعرض للخطر هو: /public/plugins//، حيث أن هو معرّف المكوّن الإضافي لأي مكوّن...

7.5CVSS8.5AI score0.88503EPSS
SaveExploits45References1
Kitploit
Kitploit
added 2026/09/02 10:36 a.m.3 views

CVE-2021-43798-EXPLOIT

CVE-2021-43798 - Grafana Directory Traversal 🔍 Grafana is an open-source platform for monitoring and observability. Versions 8.0.0-beta1 through 8.3.0 except for patched versions are vulnerable to a directory traversal attack, allowing unauthorized access to local files. This vulnerability does n...

7.5CVSS8.5AI score0.88503EPSS
SaveExploits45
SUSE CVE
SUSE CVE
added 2026/08/28 2:22 a.m.6 views

SUSE CVE-2024-29180

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the...

7.5CVSS6.6AI score0.01226EPSS
SaveExploits1References4
OSV
OSV
added 2026/08/25 1:30 a.m.21 views

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

8.6CVSS5.7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/25 1:30 a.m.39 views

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

8.6CVSS0.00119EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/24 1:49 p.m.8 views

CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...

8.2CVSS5.8AI score
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in Firefox

The sourceMapURL feature in devtools lacked security checks, which would have prevented a webpage from attempting to include local files or other files that should be inaccessible. This vulnerability affects Firefox versions earlier than 99...

6.5CVSS6.5AI score0.00572EPSS
SaveExploits1References1
OSV
OSV
added 2026/08/21 10:54 p.m.14 views

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

7.8CVSS6.3AI score
SaveExploits0References5
OSV
OSV
added 2026/08/20 11:21 a.m.10 views

CVE-2026-77074 n8n before 1.123.69 SSRF via Edit Image Node

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access...

6CVSS5.6AI score
SaveExploits0References4
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.20 views

GO-2026-4352 vulnerabilities

Vulnerabilities for packages: opentofu...

5.3AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.43 views

GO-2023-1709 vulnerabilities

Vulnerabilities for packages: k3d...

5.3AI score
SaveExploits0
EUVD
EUVD
added 2026/08/13 12:31 a.m.15 views

EUVD-2026-57695

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

5.3AI score0.00431EPSS
SaveExploits0References4
Chainguard
Chainguard
added 2026/08/10 8:30 p.m.15 views

GHSA-F23P-VX2J-J53R vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, wazuh-dashboard, wazuh-dashboard-fips...

5.9AI score
SaveExploits0
Rows per page
Query Builder