CVE-2025-44137

CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creati...

BurpSuite_403Bypasser

403Bypasser An burpsuite extension to bypass 403 restricted directory. By using PassiveScan default enabled, each 403 request will be automatically scanned by this extension, so just add to burpsuite and enjoy. Payloads: $1: HOSTNAME $2: PATH $1/$2 $1/%2e/$2 $1/$2/. $1//$2// $1/./$2/./...

CVE-2025-69599

CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...

CVE-2024-32019-ndsudo

The ndsudo vulnerability allows an attacker to gain root permissions by exploiting an untrusted search path in the ndsudo tool, which is part of the Netdata Agent. This can enable the execution of arbitrary programs with elevated privileges if the attacker places a malicious binary in a writable...

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

CVE-2025-6218-POC

CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit A security research tool for detecting and testing the CVE-2025-63888 vulnerability in ThinkPHP 5.0.24, which allows Remote Code Execution through file inclusion attacks. ⚠️ Disclaimer This tool is for authorized security testing and...

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution RCE vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the --templatesPath query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig...

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

shiro-cve-2020-17523

Apache Shiro Two Postures Authentication Bypass Analysis CVE-2020-17523 0x01 Vulnerability Description Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro's easy-to-understand API, you can...

CVE-2024-48990

CVE-2024-48990 hello this is 0x3bs In victim machine: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib in attacker machine to compile lib.c in attacker machine : gcc -shared -fPIC -o exp.so lib.c and in vivtim machine : in /tmp chmod +x run.sh in...

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Version Spring Framework 5.2.20 and 5.3.18 Patched version: Spring Framework 5.3.18 and 5.2.20 Spring Boot 2.6.6 and 2.5.12 Details Spring Core is the core component of Spring Framework. This is the foundation to build other components in the Spring Framework...

CVE-2024-32019-PoC

CVE-2024-32019-PoC Bash script for Privilege Escalation via "ndsudo" Netdata Local Exploit Netdata Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 Vulnerability Description The "ndsudo" tool runs a restricted set of external commands, but the search paths are supplied by the "PATH"...

Important: Red Hat Security Advisory: mrtg security update

An update for mrtg is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-32019-POC

⚠️ CVE-2024-32019 - PoC 📌 Affected Versions = v1.45.0, = v1.44.0-60, v1.45.0-169 🛠️ Proof of Concept CVE-2024-32019 — ndsudo local privilege escalation via untrusted search path. 🔧 Compile the Exploit x8664-linux-gnu-gcc -o nvme exploit.c -static 📤 Deploy on Target Machine 1. Transfer the compiled...

CVE-2025-53632

CVE-2025-53632 This repository contains an exploit of CVE-2025-53632 affecting Chall-Manager !WARNING The way Chall-Manager deals with scenarios, it is still completly exploitable without the zip slip: simply tamper the pulumi binary from the scenario such that the next execution runs your...

NVMS-1000-Directory-Traversal-Bash

NVMS-1000-Directory-Traversal-Bash Directory Traversal Exploit written in Bash for NVMS-1000 CVE-2019-20085. Usage ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Example ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Disclaimer This POC was created for educational purposes...

CVE-2026-112147

A vulnerability exists in ai-genius-automations octoally up to version 1.0.87 due to a flaw in an unknown function within server/src/index.ts . An attacker can perform a remote manipulation of the argument path , leading to information disclosure . The exploit has been made public and is availabl...

CVE-2026-112147 ai-genius-automations octoally index.ts information disclosure

A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made...