EUVD-2026-109219

BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with...

CVE-2021-42013

CVE-2021-42013 - Apache HTTP Server 2.4.50 How to Run CVE-2021-42013-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this github repo 3. Go to the Path Traversal folder 4. Enter the following commands docker build -t cve-2021-42013-path-traversal . and docker run --rm -dit...

trellix-tarslip-patch-bypass

trellix-tarslip-patch-bypass In 2023, Trellix announced 1 that they patched +61,000 open-source projects for CVE-2007-4559, an old path traversal vulnerability. Analyzing their patch, it's easy to notice that it can be bypassed using a symlink. Symlink path traversal is an old technique, and it h...

Project-CVE-2026-75604

Next.js Windows Cache Traversal Security Research Defensive security research and authorized validation only. This repository concerns CVE-2026-75604 , a critical vulnerability that may permit unauthenticated remote code execution on certain Windows-hosted Next.js deployments. Credits Coded by:...

CVE-2021-41773-PoC

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 This script test Apache HTTP Server 2.4.49 Usage: CVE-2021-41773.py options Only for one IP: python CVE-2021-41773.py IPaddress Option -f For IP list in file Example: python CVE-2021-41773.py -f...

CVE-2025-52488

DNN Unicode Path Normalization NTLM Hash Disclosure Exploit CVE-2025-52488 Overview This exploit targets a vulnerability in DNN formerly DotNetNuke versions 6.0.0 to before 10.0.1 that allows attackers to disclose NTLM hashes through Unicode path normalization attacks. Vulnerability Details CVE I...

CVE-2018-1058

CVE-2018-1058 — PostgreSQL Search Path Demonstration This repository contains the final report and the reproducibility artifacts for: CVE-2018-1058: Privilege Escalation in PostgreSQL through Uncontrolled Search Path The goal is to demonstrate the search-path trust failure behind CVE-2018-1058...

CVE-2021-27905.POC

CVE-2021-27905.POC POC for LFI related to CVE-2021-27905 POC for apache-solr-file-read nuclei template Use traverse.sh path For example, using /root as path, will display the content of all files recursively ./traverse.sh /root It's also possible to traverse and get the content of every file on t...

watchTowr-vs-SmarterMail-CVE-2025-52691

CVE-2025-52691 SmarterMail Pre-Auth RCE SmarterMail Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to write the .aspx file to the C:\Program Files x86\SmarterTools\SmarterMail\Service\AppData directory builds 94xx or C:\Program Files...

CVE-2024-23339

CVE-2024-23339 취약점 개요 CVE-2024-23339 CVSS : 6.5 Jan 23, 2024 ProtoType Pollution in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utilit...

AutoPentest-DRL

AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning AutoPentest-DRL is an automated penetration testing framework based on Deep Reinforcement Learning DRL techniques. AutoPentest-DRL can determine the most appropriate attack path for a given logical network, and can...

unKover

unKover Uncover what's forbidden. 403 bypass tester by Brute Logic. Part of the King of Noobs suite — offensive recon tools built on KISS and the Pareto principle. Simple, fast, and effective. What It Does unKover tests a URL returning 403 Forbidden or 401 Unauthorized against a set of proven...

spark-connect-archive-fragment

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-connect-archive-fragment spark-connect-archive-fragment Class: File write Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation Spark Connect AddArtifacts names of the form archives/ split on th...

shiro-cve-2020-17523

Apache Shiro Two Postures Authentication Bypass Analysis CVE-2020-17523 0x01 Vulnerability Description Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro's easy-to-understand API, you can...

zimaos-cve-2026-28286-arbitrary-file-write

🚨 CVE-2026-28286 — ZimaOS Arbitrary File Write From API Misconfiguration → Arbitrary File Write → Potential System Compromise ⚡ TL;DR Endpoint: /v21/files/file Issue: No path validation Impact: Arbitrary file write outside the intended directory Severity: 🔴 Critical 🧪 Quick Start git clone...

CVE-2021-41773

CVE-2021-41773 A simple bash POC script for Path Traversal & RCE vulnerability in Apache 2.4.49 Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ ./exploit.sh Disclamer This tool is for educational purposes only. I hold no responsibility for any misuse...

CVE-2023-23397

CVE-2023-23397 Vulnerability Details 🚨💻 Microsoft has recently addressed a set of critical security vulnerabilities, including this zero-day exploits: CVE-2023-23397. The Common Vulnerability Scoring System CVSS assigned score of 9.8 to this exploit. CVE-2023-23397: Elevation of Privilege in...

CVE-2020-12112

CVE-2020-12112 🚨 BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. Story 📜 During a distance learning course on a BigBlueButton instance a student in my class shared my teacher's slide presentation link and I noticed that the file name was includ...

CVE-2024-21626

about Steps to reproduce ensure kernal = 5.4,4.19,.. and there is openat2 in /proc/kallsyms. v1.0.0-rc93= runc =1.1.11 $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2 ffffffffa666dea0 t dosysopenat2...

CVE-2025-63915-There-is-a-Reflected-xss-vulnerability-exists-in-DoraCMS

CVE-2025-63915 Target:https://www.html-js.cn Github:https://github.com/doramart/DoraCMS Version:V2.1.8 Vulnerability Name:Reflected Cross-Site Scripting XSS Vulnerability in DoraCMS V2.1.8 CWE-79 Vulnerability Type: Reflected Cross-Site Scripting Reflected XSS Discovery Date: 2025-10-17...