CVE-2021-43798-Grafana-path-traversal-tester

Grafana Path Traversal Tester This script automates the testing of known Grafana plugin endpoints for potential path traversal vulnerabilities using curl. 🛠 Features Reads target paths from a file e.g. paths.txt Sends HTTP requests using --path-as-is to bypass normalization Captures HTTP status...

Grafana-Plugin-Enumerator-CVE-2021-43798

Grafana CVE-2021-43798 插件枚举器 一个基于 Bash 的小型工具，用于测试 Grafana 实例是否存在 CVE-2021-43798 ，这是一个影响存在漏洞的 Grafana 版本的目录遍历漏洞。 该工具枚举 Grafana 插件 ID，并使用 curl --path-as-is 测试目录遍历是否能够访问已知文件。 仅限授权安全测试和实验环境使用。 文件 . ├── grafana-windows.sh ├── grafana-linux.sh ├── plugins.txt └── README.md grafana-windows.sh ：测试对...

cve-2021-41773-docker-lab

实验 CVE-2021-41773 用于演练/学习CVE-2021-41773的容器实验 文件泄露： $ docker build -t apache-default defaultconf $ docker run -dit --name apache-app -p 81:80 apache-default PoC curl -s --path-as-is "http://iptarget:80/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" 输出 注意： 输出来自真实案例。 curl -s --path-as-is...

Exploit for Path Traversal in Grafana

Grafana CVE-2021-43798 Plugin Enumerator A small Bash-based t...

CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

UBUNTU-CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

CVE-2021-23797

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

PT-2021-15552

Name of the Vulnerable Software and Affected Versions: http-server-node versions all Description: The issue concerns a Directory Traversal vulnerability via the use of the --path-as-is option. This allows for unauthorized access to files and directories outside the intended directory structure...

CVE-2021-23797: Improper Limitation of a Pathname to a Restricted Directory

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is...

Directory Traversal

Overview http-server-node is a simple, zero-configuration command-line http server Affected versions of this package are vulnerable to Directory Traversal via use of --path-as-is. PoC curl -s --path-as-is http://127.0.0.1:3000/../sensitive-file.txt Details A Directory Traversal attack also known ...

PT-2019-20025

Name of the Vulnerable Software and Affected Versions GUN versions prior to 0.2019.416 Description A serious issue was found in the static file server module included with GUN, where using curl --path-as-is allowed reads on any parent directory or files. This issue did not affect requests made vi...