Lucene search
+L

21117 matches found

NVD
NVD
added 2026/09/09 5:17 p.m.4 views

CVE-2026-87927

MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...

8.8CVSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/09 4:44 p.m.5 views

EUVD-2026-75109

MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...

8.8CVSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/09 4:44 p.m.6 views

CVE-2026-87927 MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher

MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...

8.8CVSS
SaveExploits0References5
CVE
CVE
added 2026/09/09 4:44 p.m.6 views

CVE-2026-87927

MaxSite CMS through version 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers. By supplying base64-encoded path traversal sequences, unauthenticated attackers bypass path validation checks and execute admin-gated handler actions without authentication...

8.8CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/09 4:02 p.m.5 views

LFI-FINDER

🍀 LFI FINDER TOOL 🍀 Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR 📹 How to use 📹 Click on the image... LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allow...

6AI score
SaveExploits0
EUVD
EUVD
added 2026/09/09 1:32 p.m.3 views

EUVD-2026-74928

Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image syntax in checkout acceptance notes that survive HTML escaping, are expanded ...

8.5CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 12:56 p.m.6 views

Lfi-Space

🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 11:42 a.m.9 views

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage root@kitploit: usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site...

9.8CVSS5.8AI score0.04826EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 11:35 a.m.297 views

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

6.5AI score
SaveExploits0References5
Patchstack
Patchstack
added 2026/09/09 11:27 a.m.5 views

WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.22 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Event SOlution versions = 4.1.22...

7.5CVSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/09 10:54 a.m.4 views

CVE-2023-39141-LFI-enumerator

Enumerate remote server files by exploiting CVE-2023-39141 See POC: https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e...

7.5CVSS7.3AI score0.03367EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 10:35 a.m.5 views

CVE-2021-46417

CVE-2021-46417 Franklin Fueling Systems Colibri Controller Module - Local File Inclusion Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2021-46417.py -u...

7.8CVSS7.3AI score0.59753EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 10:34 a.m.6 views

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC This is the Proof-of-concept exploit code for three vulnerabilities discovered by Jonas Mattsson and Hugo van den Toorn at Outpost24 Ghost Labs. These vulnerabilities are discovered in the web server component on a Pyrescom Termod4 time control machine. These vulnerabilities c...

9CVSS7.2AI score0.06929EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 10:27 a.m.6 views

CVE-2020-1611

Juniper Junos Space prior to 19.4R1 Local File Inclusion Vulnerability CVE-2020-1611 PoC Juniper Junos Space prior to 19.4R1 is vulnerable to a local file inclusion vulnerability. An attacker with normal user rights could exploit this vulnerability. The "Download Report" function is vulnerable...

6.5CVSS6.8AI score0.01667EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:25 a.m.4 views

LFiFreak

LFI Freak Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 What is this all about? A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Dependencies BeautifulSoup Disclaimer...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 10:16 a.m.7 views

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution. CVE-2018-12031 To exploit vulnerability, someone could use...

9.8CVSS8.3AI score0.17313EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 10:14 a.m.7 views

CVE-2025-11371

CVE-2025-11371 Overview This repository contains a proof-of-concept exploit for CVE-2025-11371, an unauthenticated Local File Inclusion LFI vulnerability in Gladinet CentreStack and TrioFox. The exploit allows remote retrieval of sensitive system files, such as the Web.config, which can expose...

7.5CVSS6.9AI score0.92094EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 10:11 a.m.6 views

CVE-2025-26240

CVE-2025-26240 This is proof of concept code for exploitation of the pdfkit fromstring method. It contains simple payload demonstrating both LFI and SSRF...

8.4CVSS5.9AI score0.00392EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 9:57 a.m.8 views

Fonoster-LFI-PoC

CVE-2024-43035 - Fonoster LFI Proof of Concept This repository contains a Proof of Concept PoC script demonstrating a Local File Inclusion vulnerability in Fonoster. This tool is for educational and authorized testing purposes only. Usage Read Local File To retrieve a local file from the server:...

5.8CVSS8.1AI score0.02362EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 9:40 a.m.6 views

CVE-2024-6460

CVE--2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage root@kitploit: ausage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress si...

9.8CVSS5.8AI score0.04826EPSS
SaveExploits1
Rows per page
Query Builder