CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability Installation root@kitploit: git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Usage Vulnerable versions...

CVE-2022-45299

CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...

CVE-2023-24055

Descargo de responsabilidad Este script es únicamente para fines educativos y de demostración. El autor no respalda ni aprueba el uso de este script para actividades criminales o maliciosas, y solo debe usarse donde se permita explícitamente con el permiso adecuado. Este script debe usarse con...

CVE-2024-23897

CVE-2024-23897 Nuclei Template For Exploit CVE-2024-23897 This template serves as a crucial warning to all users if the CVE-2024-23897 local file vulnerability is detected within your system, it is imperative to take. immediate action and patch your systems without delay. This vulnerability poses...

GrafanaDirectoryScanner

PoC para CVE-2021-43798 Grafana es una plataforma de código abierto para monitoreo y observabilidad. Las versiones de Grafana desde 8.0.0-beta1 hasta 8.3.0 excepto las versiones parcheadas son vulnerables a ldirectory traversal, permitiendo el acceso a archivos locales. La URL vulnerable es:...

CVE-2021-43798

CVE-2021-43798 Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions iss vulnerable to directory traversal, allowing access to local files Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions i...

WebKitGTK-DND-Fix

WebKitGTK-DND-Fix Research and CI notebook for restoring trusted file drag-and-drop on WebKitGTK and WPE after CVE-2025-13947. The issue CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg let web content read local file contents through drag-and-drop on WebKitGTK. The upstream fix, bugs.webkit.org...

CVE-2021-43798_exploit

CVE-2021-43798exploit Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions is vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: /public/plugins//, where is the plugi...

CVE-2021-43798-EXPLOIT

CVE-2021-43798 - Grafana Directory Traversal 🔍 Grafana is an open-source platform for monitoring and observability. Versions 8.0.0-beta1 through 8.3.0 except for patched versions are vulnerable to a directory traversal attack, allowing unauthorized access to local files. This vulnerability does n...

CVE-2026-63435

Mail is an internet library for Ruby designed to handle email generati...

SUSE CVE-2024-29180

Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not validate the supplied URL address sufficiently before returning the local file. It is possible to access any file on the developer's machine. The middleware can either work with the...

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78675 GitPython before 3.1.59 Local File Content Disclosure via .gitmodules

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...

Astra Linux – Vulnerability in Firefox

The sourceMapURL feature in devtools lacked security checks, which would have prevented a webpage from attempting to include local files or other files that should be inaccessible. This vulnerability affects Firefox versions earlier than 99...

CVE-2026-49360 Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

Recce is a data-validation toolkit for enhanced dbt data build tool PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured...

CVE-2026-77074 n8n before 1.123.69 SSRF via Edit Image Node

n8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit Image node's Draw Text operation that allows authenticated users to inject MVG primitives. Attackers can craft malicious text values to issue blind outbound HTTP requests to arbitrary addresses or access...

GO-2026-4352 vulnerabilities

Vulnerabilities for packages: opentofu...

GO-2023-1709 vulnerabilities

Vulnerabilities for packages: k3d...

EUVD-2026-57695

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...