71600 matches found
Webasyst Shop-Script CMS Path Traversal
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...
CVE-2026-30952-PoC
CVE-2026-30952: LiquidJS Path Traversal PoC This repository contains a Proof of Concept PoC for CVE-2026-30952 , a high-severity path traversal vulnerability discovered in the liquidjs library versions console.logo.slice0,500;...
CVE-2022-30333
A proof of concept for CVE-2022-30333 - a path traversal vulnerability in unRAR versions prior to 6.11. I created this as a demonstration of the exploit for an AttackerKB writeup, and hope to incorporate it in a Metasploit Module soon! Basically, you provide a target including path traversal and...
CVE-2021-43798-grafana_fileread
CVE-2021-43798-grafanafileread If the target is behind a reverse proxy, replace the payload with this one: url1 = url +"/public/plugins/"+str.rstripplugins+"//../..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/etc/passwd" Grafana is a cross-platform, open-source data visualization web application...
CVE-2026-35570
Breaking Out of the Sandbox: How I Found a Critical Path Traversal Bypass in openclaude CVE-2026-35570 | CVSS 8.4 High | openclaude v0.1.7 Not every vulnerability requires a sophisticated exploit chain. Sometimes a single misplaced return statement is enough to blow a hole straight through your...
CVE-2021-43798
usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: the following arguments are required: -H/--host example: python3 grafana-exploit.py --host if successfuly read arbitary-file situation show the request URL and curl command +RequestURL...
watchTowr-vs-SmarterMail-CVE-2025-52691
CVE-2025-52691 SmarterMail Pre-Auth RCE SmarterMail Pre-Auth RCE 1day Detection Artifact Generator Tool Detection in Action Detection Artifact Generator attempts to write the .aspx file to the C:\Program Files x86\SmarterTools\SmarterMail\Service\AppData directory builds 94xx or C:\Program Files...
CVE-2015-3337
CVE-2015-3337 CVE-2015-3337 Arbitrary File Read http://10.10.20.166:9200/plugin/head/../../../../../../../../../etc/passwd Usage: python CVE-2015-3337.py python CVE-2015-3337.py / \ | | | | / | |/ | | | | || || || / | / / | | | | ' / /'| |/' || | | \ / / / / / / / / | | | | | | || / / | /| | | |...
CVE-2026-29780
Path Traversal in Official Example Script Leading to Arbitrary File Write Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted fr...
CVE-2021-41773
CVE-2021-41773 CVE-2021-41773 According to The National Vulnerability Database NVD CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. Path Traversal The path traversal vulnerability was introduced due to the new code change added for path...
CVE-2021-40444
Fully Weaponized CVE-2021-40444 Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution, works with arbitrary DLL files. Background Although many PoC are already around the internet, I guessed to give myself a run to weaponizing this vulnerability, as what I...
CVE-2021-41773.git1
CVE-2021-41773 Fast python tool to test apache path traversal CVE-2021-41773 in a List of url Usage :- create a live urls file and use the flag "-l" python3 apachepathtraversal.py -l urls-list.txt...
CVE-2022-39802
3242933 – CVE-2022-39802 File path traversal vulnerability in SAP Manufacturing Execution General information Risk: CRITICAL Versions Affected: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 Vendor URL: https://sap.com Bug: File path traversal vulnerability...
EUVD-2026-109387
Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a crafted URL containing encoded '../'...
EUVD-2026-109381
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and...
CVE-2025-68428_PoC
CVE-2025-68428PoC $ git clone https://github.com/12nio/CVE-2025-68428PoC/ && cd CVE-2025-68428PoC $ sudo docker build -t poc . $ sudo docker run --rm -p 8080:8080 --name vuln poc $ curl "http://127.0.0.1:8080/api/v1/generate-invoice?client=Dinko&branding=../secret" --output poc.pdf...
CVE-2024-34470
CVE-2024-34470 : An Unauthenticated Path Traversal Vulnerability in HSC Mailinspector CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-34470 with Asychronous Performance. Installation git clone https://github.com/th3gokul/CVE-2024-34470.git cd CVE-2024-34470 pip insta...
CVE-2026-28995
CVE-2026-28995 Proof of Concept for CVE-2026-28995 — Path Traversal vulnerability in App Intents on iOS 26.4.2 and below. Description This vulnerability allows a malicious app to read any file outside its sandbox via App Intents. The root cause is insufficient path validation in Apple's App Inten...
CVE-2016-5639
CVE-2016-5639 Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules Two similar modules that take advantage of CVE-2016-5639 to dump hashes and retrieve files through path traversal. I made these modules separate because I wanted experience writing something that could "dump" hashes,...