CVE-2023-39024-5-POC

CVE-2023-39024 e CVE-2023-39025 POC POC para CVE-2023-39024 e CVE-2023-39025 Harman Media Suite Visão Geral Aplicação Afetada: Harman Media Suite Versões Afetadas: 4.2.0 e anteriores Descrição: O Harman Media Suite versões 4.2.0 e inferiores é vulnerável a Server Side Request Forgery SSRF...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

Cellinx NVT Web Server - Local File Disclosure

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. id: CVE-2023-23063 info: name: Cellinx NVT Web Server - Local File Disclosure author: daffainfo severity: high description: | Cellinx NVT v1.0.6.002b was discover...

CVE-2017-10617

CVE-2017-10616 & CVE-2017-10617 Queste due vulnerabilità riguardano Juniper Contrail versione 2.2, 3.0, 3.1 e 3.2: Credenziali hardcoded CVE-2017-10616 XML External Entity CVE-2017-10617 Il bollettino di sicurezza del fornitore è disponibile su Juniper Security Alert JSA10819 2017-10. Il servizio...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Lettura Arbitraria di File Locali https://www.metabaseq.com/imagemagick-zero-days/ Basandomi sul PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, ho creato un ambiente di test per la vulnerabilità utilizzando Docker. Utilizzo root@kitploit: get image docker pull...

CVE-2021-41773

CVE-2021-41773 Playground === Questa è una piccola ricetta Docker per configurare un contenitore basato su Debian bookworm con un'istanza di Apache HTTPd 2.4.49 vulnerabile a CVE-2021-41773. CGI è stato esplicitamente abilitato in modo da poter essere utilizzato per testare/verificare il...

CVE-2022-0219

CVE-2022-0219 O Jadx é vulnerável a Restrição Incorreta de Entidades Externas XML CWE-611 ao exportar um arquivo APK malicioso através da opção -e contendo um AndroidManifest.xml / strings.xml manipulado para o gradle. Isso pode levar à divulgação de arquivos locais quando usado a partir da CLI...

exploit-CVE-2019-14530

OpenEMR CVE-2019-14530 एक्सप्लॉइट OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2021-41773

CVE-2021-41773 Playground Questa è una semplice ricetta Docker per configurare un container basato su Debian bookworm con un'istanza di Apache HTTPd 2.4.49 vulnerabile a CVE-2021-41773. CGI è stato esplicitamente abilitato in modo che possa essere utilizzato per testare/verificare il comportament...

CVE-2026-30039

CVE-2026-30039 Materiali di advisory di sicurezza per CVE-2026-30039, un problema di estrazione di archivi basato su symlink in rarfile che interessa le versioni 4.2 e precedenti. Advisory in inglese | 中文版本 Panoramica rarfile estrae i collegamenti simbolici da archivi RAR controllati...

CVE-2025-12137

1 Helper per chiamare l'API REST del plugin con il nonce corrente root@kitploit: async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await fetch$location.origin/wordpress/wp-json/iwp/v1$path, method...

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF e Divulgazione di File Locali Informazioni Questo repository fornisce una proof‑of‑concept per CVE‑2024‑58258 , una vulnerabilità di SugarCRM 13.0.4 / 14.0.1 in cui l'input utente viene interpretato come LESS nell'API /css/preview, consentendo SSRF o accesso a file...

EUVD-2026-65615

The Kaltura HTML5 player mwEmbed / html5lib contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter is used as the base URL for a backend request and accepts non‑HTTP schemes such as file://. When an exception or...

CVE-2026-19913

The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated arbitrary file read vulnerability in the mwEmbedLoader.php endpoint. The ServiceUrl parameter accepts non-HTTP schemes such as file://; the KalturaClientBase PHP client fetches the data and passes it to unserialize() withou...

CVE-2026-19913 CVE-2026-19913

The Kaltura HTML5 player mwEmbed / html5lib contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter is used as the base URL for a backend request and accepts non‑HTTP schemes such as file://. When an exception or...

CVE-2022-24716-2

CVE-2022-24716 Icinga Web 2 ist eine quelloffene Überwachungs-Weboberfläche, ein Framework und eine Kommandozeilenschnittstelle. Nicht authentifizierte Benutzer können die Inhalte von benutzerzugänglichen lokalen Systemdateien des Webservers offenlegen, einschließlich...

CVE-2026-78675

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78675

GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, enabling a local file content disclosure attack. An attacker who can place a malicious .gitmodules file in a repository can craft [include] directives pointing to sensitive local files. When repo.submodules is acces...

PT-2026-81395

Name of the Vulnerable Software and Affected Versions Kaltura HTML5 player mwEmbed / html5lib versions 2.x and earlier Description A local file disclosure issue exists due to improper validation of the ServiceUrl parameter in the 'mwEmbedLoader.php' endpoint. This parameter, intended as the base...