CVE-2021-43798-Grafana-path-traversal-tester

Probador de Path Traversal en Grafana Este script automatiza la prueba de endpoints de plugins de Grafana conocidos por posibles vulnerabilidades de path traversal usando curl. 🛠 Características Lee rutas objetivo desde un archivo p. ej. paths.txt Envía solicitudes HTTP usando --path-as-is para...

Grafana-Plugin-Enumerator-CVE-2021-43798

Enumerador de Plugins de Grafana CVE-2021-43798 Una pequeña herramienta basada en Bash para probar instancias de Grafana en busca de CVE-2021-43798 , una vulnerabilidad de directory traversal que afecta a versiones vulnerables de Grafana. La herramienta enumera IDs de plugins de Grafana y utiliza...

cve-2021-41773-docker-lab

实验 CVE-2021-41773 用于演练/学习CVE-2021-41773的容器实验 文件泄露： $ docker build -t apache-default defaultconf $ docker run -dit --name apache-app -p 81:80 apache-default PoC curl -s --path-as-is "http://iptarget:80/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" 输出 注意： 输出来自真实案例。 curl -s --path-as-is...

CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

UBUNTU-CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

CVE-2021-23797: Improper Limitation of a Pathname to a Restricted Directory

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

Directory Traversal

Overview http-server-node is a simple, zero-configuration command-line http server Affected versions of this package are vulnerable to Directory Traversal via use of --path-as-is. PoC curl -s --path-as-is http://127.0.0.1:3000/../sensitive-file.txt Details A Directory Traversal attack also known ...