CVE-2021-41773

CVE-2021-41773 Playground === Questa è una piccola ricetta Docker per configurare un contenitore basato su Debian bookworm con un'istanza di Apache HTTPd 2.4.49 vulnerabile a CVE-2021-41773. CGI è stato esplicitamente abilitato in modo da poter essere utilizzato per testare/verificare il...

CVE-2017-10617

CVE-2017-10616 & CVE-2017-10617 Queste due vulnerabilità riguardano Juniper Contrail versione 2.2, 3.0, 3.1 e 3.2: Credenziali hardcoded CVE-2017-10616 XML External Entity CVE-2017-10617 Il bollettino di sicurezza del fornitore è disponibile su Juniper Security Alert JSA10819 2017-10. Il servizio...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Lettura Arbitraria di File Locali https://www.metabaseq.com/imagemagick-zero-days/ Basandomi sul PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, ho creato un ambiente di test per la vulnerabilità utilizzando Docker. Utilizzo root@kitploit: get image docker pull...

CVE-2022-0219

CVE-2022-0219 O Jadx é vulnerável a Restrição Incorreta de Entidades Externas XML CWE-611 ao exportar um arquivo APK malicioso através da opção -e contendo um AndroidManifest.xml / strings.xml manipulado para o gradle. Isso pode levar à divulgação de arquivos locais quando usado a partir da CLI...

Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...

Cellinx NVT Web Server - Local File Disclosure

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. id: CVE-2023-23063 info: name: Cellinx NVT Web Server - Local File Disclosure author: daffainfo severity: high description: | Cellinx NVT v1.0.6.002b was discover...

exploit-CVE-2019-14530

OpenEMR CVE-2019-14530 एक्सप्लॉइट OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2021-41773

CVE-2021-41773 Playground Questa è una semplice ricetta Docker per configurare un container basato su Debian bookworm con un'istanza di Apache HTTPd 2.4.49 vulnerabile a CVE-2021-41773. CGI è stato esplicitamente abilitato in modo che possa essere utilizzato per testare/verificare il comportament...

CVE-2026-30039

CVE-2026-30039 Materiali di advisory di sicurezza per CVE-2026-30039, un problema di estrazione di archivi basato su symlink in rarfile che interessa le versioni 4.2 e precedenti. Advisory in inglese | 中文版本 Panoramica rarfile estrae i collegamenti simbolici da archivi RAR controllati...

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

CVE-2025-12137

1 Helper per chiamare l'API REST del plugin con il nonce corrente root@kitploit: async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await fetch$location.origin/wordpress/wp-json/iwp/v1$path, method...

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF e Divulgazione di File Locali Informazioni Questo repository fornisce una proof‑of‑concept per CVE‑2024‑58258 , una vulnerabilità di SugarCRM 13.0.4 / 14.0.1 in cui l'input utente viene interpretato come LESS nell'API /css/preview, consentendo SSRF o accesso a file...

EUVD-2026-65615

The Kaltura HTML5 player mwEmbed / html5lib contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter is used as the base URL for a backend request and accepts non‑HTTP schemes such as file://. When an exception or...

CVE-2026-19913

The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated arbitrary file read vulnerability in the mwEmbedLoader.php endpoint. The ServiceUrl parameter accepts non-HTTP schemes such as file://; the KalturaClientBase PHP client fetches the data and passes it to unserialize() withou...

CVE-2026-19913 CVE-2026-19913

The Kaltura HTML5 player mwEmbed / html5lib contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter is used as the base URL for a backend request and accepts non‑HTTP schemes such as file://. When an exception or...

CVE-2022-24716-2

CVE-2022-24716 Icinga Web 2 ist eine quelloffene Überwachungs-Weboberfläche, ein Framework und eine Kommandozeilenschnittstelle. Nicht authentifizierte Benutzer können die Inhalte von benutzerzugänglichen lokalen Systemdateien des Webservers offenlegen, einschließlich...

CVE-2026-78675

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

CVE-2026-78675

GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, enabling a local file content disclosure attack. An attacker who can place a malicious .gitmodules file in a repository can craft [include] directives pointing to sensitive local files. When repo.submodules is acces...

PT-2026-81395

Name of the Vulnerable Software and Affected Versions Kaltura HTML5 player mwEmbed / html5lib versions 2.x and earlier Description A local file disclosure issue exists due to improper validation of the ServiceUrl parameter in the 'mwEmbedLoader.php' endpoint. This parameter, intended as the base...

UBUNTU-CVE-2026-70626

NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open that allows local attackers to read arbitrary files outside the corpus root. The vulnerability exists because path validation is lexical and does not account for symlink resolution, enabling attackers to place...