1201 matches found
Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)
cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...
Gotenberg < 8.34.0 - Local File Disclosure
Gotenberg before 8.34.0 allows SSRF and limited local file disclosure via its /forms/libreoffice/convert endpoint. When LibreOffice is used to convert user-uploaded DOCX files, external relationships within the document such as a:blip r:link TargetMode="External" can instruct LibreOffice to fetch...
Cellinx NVT Web Server - Local File Disclosure
Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. id: CVE-2023-23063 info: name: Cellinx NVT Web Server - Local File Disclosure author: daffainfo severity: high description: | Cellinx NVT v1.0.6.002b was discover...
CVE-2022-24716-2
CVE-2022-24716 Icinga Web 2 es una interfaz web de monitoreo de código abierto, framework e interfaz de línea de comandos. Los usuarios no autenticados pueden filtrar el contenido de archivos locales del sistema accesibles por el usuario desde el servidor web, incluidos los archivos de...
CVE-2021-41773
CVE-2021-41773 测试场 这是一个小型 Docker 配置，用于在基于 Debian bookworm 的容器中搭建一个运行 Apache HTTPd 2.4.49 的实例，该版本存在 CVE-2021-41773 漏洞。 已显式启用 CGI，因此可用于测试/验证本地文件泄露行为以及远程命令执行行为。 用法 root@kitploit: $ docker-compose build && docker-compose-up 本地文件泄露 root@kitploit: $ curl -s --path-as-is...
CVE-2017-10617
CVE-2017-10616 和 CVE-2017-10617 这两个漏洞影响 Juniper Contrail 版本 2.2、3.0、3.1 和 3.2： 硬编码凭据 CVE-2017-10616 XML 外部实体 CVE-2017-10617 厂商安全公告可在 Juniper 安全警报 JSA10819 2017-10 查看。 Contrail 产品中的易受攻击的服务是一个 IFMAP 守护进程，它来自 irond。为简单起见，我们将继续使用 irond 并利用 XXE 漏洞。 易受攻击的 irond Docker 镜像 我们都喜欢动手实践。构建镜像： root@kitploit: ...
CVE-2023-39024-5-POC
CVE-2023-39024 和 CVE-2023-39025 的 POC CVE-2023-39024 和 CVE-2023-39025 Harman Media Suite 的 POC 概述 受影响的应用：Harman Media Suite 受影响的版本：4.2.0 及以下 描述：Harman Media Suite（4.2.0 及以下版本）存在服务器端请求伪造（SSRF）漏洞 CVE-2023-39025 和可能的本地文件泄露（LFD）漏洞 CVE-2023-39024。如果启用了对用户门户的匿名访问，未经身份验证的用户可能能够下载存储在 Media Suite...
CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment
CVE-2022-44268 Lectura Arbitraria de Archivos Locales de ImageMagick https://www.metabaseq.com/imagemagick-zero-days/ Basado en el PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, creé un entorno de prueba de vulnerabilidades usando docker. Uso root@kitploit: get image docker pull...
Adobe Connect < 12.1.5 - Local File Disclosure
Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...
CVE-2025-12137
1 Funcion auxiliar para llamar a la API REST del plugin con el nonce actual root@kitploit: async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await...
CVE-2024-58258
CVE‑2024‑58258 – SugarCRM SSRF y Divulgación de Archivos Locales Acerca de Este repositorio proporciona una prueba de concepto para CVE‑2024‑58258 , una vulnerabilidad de SugarCRM 13.0.4 / 14.0.1 en la que la entrada del usuario se interpreta como LESS en la API /css/preview, permitiendo SSRF no...
CVE-2026-9335-keras-hdf5-externallink
CVE-2026-9335 — Keras HDF5 ExternalLink local file-content disclosure Two public Keras APIs — keras.saving.KerasFileEditor and keras.saving.loadweights / — read HDF5 group members by without a link-type check. h5py / on indexing, so an attacker-supplied , , or file containing only a link causes...
CVE-2022-0219
CVE-2022-0219 Jadx is vulnerable to Improper Restriction of XML External Entities CWE-611 when exporting a malicious APK file via the -e option containing a crafted AndroidManifest.xml / strings.xml to gradle. It can lead to local file disclosure when using it from the CLI. When used as a library...
CVE-2026-30039
CVE-2026-30039 Materiales de aviso de seguridad para CVE-2026-30039, un problema de extracción de archivos basado en enlaces simbólicos en rarfile que afecta a las versiones 4.2 y anteriores. Aviso en inglés | 中文版本 Resumen rarfile extrae enlaces simbólicos de archivos RAR controlados por el...
exploit-CVE-2019-14530
Exploit para OpenEMR CVE-2019-14530 OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...
CVE-2021-41773
CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Before versions 7.1.2-15 and 6.9.13-40, ImageMagick’s path security policy was enforced on the raw filename string before the filesystem resolved it. As a result, policy rules such as /etc/ could be...
EUVD-2025-210887
Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url...
CVE-2025-57231
Docmost v0.21.0 contains a Path Traversal vulnerability in avatar attachments , allowing an unauthenticated attacker to disclose local files by sending a POST request to a public URL. The CVSS 3.1 score is 7.5 (HIGH) with impact limited to confidentiality (no integrity or availability impact). Th...
