CVE-2024-28995

CVE-2024-28995 Path Traversal Automatizado y Lectura de Archivos Locales Características Detección de Versión : Recupera la versión de Serv-U desde la cabecera del servidor. Comprobación de Vulnerabilidad : Compara la versión detectada con una versión vulnerable conocida 15.4.2 o inferior. Prueba...

mpDNS

mpDNS 又名多用途 DNS 服务器 简单、可配置的 DNS 服务器，具有多个实用功能 Python 3 names.db - 保存所有自定义记录（参见示例） 简单的通配符，如 .example.com 捕获 unicode DNS 请求 自定义操作（即宏）： shellexec::dig google.com +short - 执行 shell 命令并以结果响应 eval::res = '1.1.1.%d' % random.randint0,256 - 执行你的 Python 代码 file::/etc/passwd - 以本地文件内容响应...

CVE-2020-5902

CVE-2020-5902 Python 脚本，用于利用 F5 Big-IP CVE-2020-5902 漏洞。 示例 利用本地文件读取： python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd 利用 RCE： python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — NLTK पाथ ट्रैवर्सल लैब एक छोटा, पुनरुत्पादनीय Docker लैब जो NLTK 3.9.4 में प्रतिशत-एन्कोडेड पाथ ट्रैवर्सल व्यवहार की तुलना NLTK 3.10.0 में सुधारे गए व्यवहार से करता है। कमजोर संस्करण URL डिकोडिंग से पहले संसाधन नाम को मान्य करता है। फिक्स्ड पेलोड...

CVE-2024-28752

Ambiente di riproduzione di Apache CXF CVE-2024-28752 Avviso di vulnerabilità: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt Avvio dell'ambiente samples/javafirstjaxwsfactorybean IDEA Avviare il servizio webservice tramite ServerStarter.java Build Usare JDK8 root@kitploit: mv...

CVE-2021-36750

CVE-2021-36749 Informazioni - Nel sistema di ingestion di Druid, InputSource viene utilizzato per leggere dati da una determinata fonte dati. Tuttavia, HTTP InputSource consente agli utenti autenticati di leggere dati da altre fonti rispetto a quelle previste, come il file system locale, con i...

cve-2020-5902

cve-2020-5902 Exploit POC root@kitploit: POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME specify the loc...

Eclipse Mojarra - Local File Read

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter. id: CVE-2020-6950 info: name: Eclipse Mojarra - Local File Read author: iamnoooob,pdresearch severity: medium description: | Directory traversal in Eclipse Mojarra...

Vitest Browser Mode - Local File Read

Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host- true, an attacker can send a request to that handler from remote to get th...

BOA Web Server 0.94.14 - Arbitrary File Access

BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

CVE-2016-10956-mail-masta

Mail Masta - Lokales Dateilesen CVE-2016-10956 Das mail-masta-Plugin 1.0 für WordPress ermöglicht lokales Dateilesen in countofsend.php und csvexport.php. Verwendung root@kitploit: $ ./CVE-2016-10956mailmasta.py -h + Mail Masta - Local File Read CVE-2016-10956 usage: CVE-2016-10956mailmasta.py -h...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Prova de Conceito para CVE-2025-27136 XXE no Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + S3 service detected + Creating bucket: xxe-32d14993 + Server response: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Retrieving file via ?location + Response:...

CVE-2022-44268

CVE-2022-44268 Questo repository contiene una Proof of Concept POC per una vulnerabilità in ImageMagick v. 7.1.0-49, una libreria di manipolazione di immagini open-source ampiamente utilizzata. La vulnerabilità consente a un attaccante di incorporare il contenuto di un file arbitrario in...

CVE-2019-8389

CVE-2019-8389 - Lettura arbitraria di file in Musicloud per iOS v1.6 CVE-2019-8389 Un codice di exploit per sfruttare una vulnerabilità di lettura di file locali nell'applicazione iOS Musicloud v1.6 Descrizione: È stata identificata una vulnerabilità di lettura di file nella funzione di...

CVE-2022-46364-poc

CVE-2022-46364 — Apache CXF XOP:Include SSRF / LFI Autore: 0xmid00 Vulnerabilità: SSRF / Lettura file locale tramite XOP:Include nelle richieste MTOM Interessati: Apache CXF 3.5.5 e 3.4.10 Cos'è la Vulnerabilità? Apache CXF elabora messaggi MTOM Message Transmission Optimization Mechanism che...

CVE-2019-5418

CVE-2019-5418 Testfall Ausführung: root@kitploit: $ rails s Proof of Concept: root@kitploit: Accept: ../../../../../../../../etc/passwd Anfrage 1 - root@kitploit: GET /shitblock HTTP/1.1 Host: REDACTED:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:65.0 Gecko/20100101 Firefox/65.0...

poc-yaws-dav-xxe

XXE nel web server Yaws CVE-2020-24379 Prova di concetto Crea l'immagine di test: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . e/o Esegui il container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Poi esegui: root@kitploit: curl -i -s -k -X LOCK...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / leitura de arquivo local via URL de resposta CVE-2026-13233 Upstream não confiável: o provedor buscava a URL indicada pela resposta do upstream. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Divulgação...

CVE-2015-4495

CVE-2015-4495 Exploit per CVE-2015-4495 / mfsa2015-78 Come usare Aggiungi la tua logica nella funzione parsedirectorylisting. Utilizzo root@kitploit: $ git clone https://github.com/vincd/CVE-2015-4495.git $ cd CVE-2015-4495 $ python -m SimpleHTTPServer Poi apri un Firefox non patchato versione...