CVE-2015-4495

CVE-2015-4495 Эксплойт для CVE-2015-4495 / mfsa2015-78 Как использовать Добавьте свою логику в функцию parsedirectorylisting. Использование root@kitploit: $ git clone https://github.com/vincd/CVE-2015-4495.git $ cd CVE-2015-4495 $ python -m SimpleHTTPServer Затем откройте неисправленный Firefox...

CVE-2022-44268

CVE-2022-44268 이 저장소는 널리 사용되는 오픈소스 이미지 조작 라이브러리인 ImageMagick v. 7.1.0-49의 취약점에 대한 개념 증명POC을 포함합니다. 이 취약점을 통해 공격자는 ImageMagick이 PNG 파일을 구문 분석할 때 크기가 조정된 이미지에 임의 파일의 콘텐츠를 포함시킬 수 있습니다. 설명 ImageMagick이 PNG 파일에 크기 조정과 같은 작업을 수행할 때, magick 바이너리에 해당 파일을 읽는 데 필요한 권한이 있다면 시스템 파일의 콘텐츠가 포함될 수 있습니다. 이 취약점은 P...

CVE-2016-10956-mail-masta

Mail Masta - 로컬 파일 읽기 CVE-2016-10956 WordPress용 mail-masta 플러그인 1.0은 countofsend.php와 csvexport.php에서 로컬 파일 읽기 취약점이 있습니다. 사용법 root@kitploit: $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h -v -s -t TARGETURL -f FILE | -F FILELIS...

CVE-2019-8389

CVE-2019-8389 - Произвольное чтение файлов в Musicloud для iOS v1.6 CVE-2019-8389 Эксплойт-код для эксплуатации уязвимости локального чтения файлов в приложении Musicloud v1.6 для iOS Описание: Уязвимость чтения файлов была обнаружена в функции передачи через Wi-Fi в Musicloud 1.6. По умолчанию...

Eclipse Mojarra - Local File Read

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter. id: CVE-2020-6950 info: name: Eclipse Mojarra - Local File Read author: iamnoooob,pdresearch severity: medium description: | Directory traversal in Eclipse Mojarra...

Vitest Browser Mode - Local File Read

Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host- true, an attacker can send a request to that handler from remote to get th...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

CVE-2024-28995

CVE-2024-28995 Parcours de chemin automatisé et lecture de fichier local Fonctionnalités Détection de version : Récupère la version de Serv-U à partir de l'en-tête du serveur. Vérification de vulnérabilité : Compare la version détectée avec une version vulnérable connue 15.4.2 ou inférieure. Test...

mpDNS

mpDNS, он же многоцелевой DNS-сервер Простой настраиваемый DNS-сервер с множеством полезных функций Python 3 names.db - хранит все пользовательские записи см. примеры Простые подстановочные знаки, например .example.com Перехват unicode DNS-запросов Пользовательские действия, также известные как...

CVE-2020-5902

CVE-2020-5902 F5 Big-IP CVE-2020-5902를 악용하는 파이썬 스크립트 예시 로컬 파일 읽기 악용: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd RCE 악용: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — NLTK पाथ ट्रैवर्सल लैब एक छोटा, पुनरुत्पादनीय Docker लैब जो NLTK 3.9.4 में प्रतिशत-एन्कोडेड पाथ ट्रैवर्सल व्यवहार की तुलना NLTK 3.10.0 में सुधारे गए व्यवहार से करता है। कमजोर संस्करण URL डिकोडिंग से पहले संसाधन नाम को मान्य करता है। फिक्स्ड पेलोड...

CVE-2024-28752

Ambiente di riproduzione di Apache CXF CVE-2024-28752 Avviso di vulnerabilità: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt Avvio dell'ambiente samples/javafirstjaxwsfactorybean IDEA Avviare il servizio webservice tramite ServerStarter.java Build Usare JDK8 root@kitploit: mv...

CVE-2021-36750

CVE-2021-36749 Informazioni - Nel sistema di ingestion di Druid, InputSource viene utilizzato per leggere dati da una determinata fonte dati. Tuttavia, HTTP InputSource consente agli utenti autenticati di leggere dati da altre fonti rispetto a quelle previste, come il file system locale, con i...

cve-2020-5902

cve-2020-5902 Exploit POC root@kitploit: POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specify the loc...

BOA Web Server 0.94.14 - Arbitrary File Access

BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Prova de Conceito para CVE-2025-27136 XXE no Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + S3 service detected + Creating bucket: xxe-32d14993 + Server response: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Retrieving file via ?location + Response:...

CVE-2022-46364-poc

CVE-2022-46364 — Apache CXF XOP:Include SSRF / LFI Autore: 0xmid00 Vulnerabilità: SSRF / Lettura file locale tramite XOP:Include nelle richieste MTOM Interessati: Apache CXF 3.5.5 e 3.4.10 Cos'è la Vulnerabilità? Apache CXF elabora messaggi MTOM Message Transmission Optimization Mechanism che...

CVE-2019-5418

CVE-2019-5418 Testfall Ausführung: root@kitploit: $ rails s Proof of Concept: root@kitploit: Accept: ../../../../../../../../etc/passwd Anfrage 1 - root@kitploit: GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0...

poc-yaws-dav-xxe

XXE nel web server Yaws CVE-2020-24379 Prova di concetto Crea l'immagine di test: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . e/o Esegui il container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Poi esegui: root@kitploit: curl -i -s -k -X LOCK...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / leitura de arquivo local via URL de resposta CVE-2026-13233 Upstream não confiável: o provedor buscava a URL indicada pela resposta do upstream. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Divulgação...