LabAutomationCVE-2021-43798

LabAutomationCVE-2021-43798 I make a script for pentest automation where i exploit CVE-2021-43798 a path traversal on Grafana to steal user secrets SSH key and then gain privileges on a Linux system using SUID. I automate this lab to share the pentest methodology...

CVE-2024-38821-POC

CVE-2024-38821: Proof of Concept PoC: Authentication Bypass in Spring Framework This is a proof of concept for the CVE-2024-38821 vulnerability Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 cd vuln docker build -t cve-2024-38821-poc . 2. Run the...

CVE-2025-27237

CVE-2025-27237 Local privilege escalation vulnerability in Zabbix Agent/Agent2 for Windows via OpenSSL configuration file hijacking. Overview Field| Value ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 HIGH CWE| CWE-427: Uncontrolled Search Path Element Type| Local Privilege Escalation Vendor|...

CAREL Boss Mini <= 1.4.0 - Local File Inclusion

Boss Mini 1.4.0 Build 6221 contains a file inclusion caused by manipulation of the 'path' argument in boss/servlet/document, letting remote attackers include arbitrary files, exploit requires remote access. id: CVE-2023-3643 info: name: CAREL Boss Mini = 1.4.0 - Local File Inclusion author:...

CVE-2026-57830

Helix Ultimate Framework — Unauthenticated Path-Traversal Arbitrary File/Folder Read+Delete This is a confirmed DoS + cross-tenant filesystem access vulnerability, NOT RCE. An RCE-escalation theory delete configuration.php to re-expose the Joomla installer was tested live and disproved — see "RCE...

Exploit for CVE-2026-105221

abraxaslabs.tech · github.com/abraxas ·&...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 Weblogic Unauthorized bypass RCE CVE-2020-14882 Oracle Weblogic Unauthorized bypass RCE test script it works on Python3 Requests POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Geck...

CVE-2021-41773-PoC

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 This script test Apache HTTP Server 2.4.49 Usage: CVE-2021-41773.py options Only for one IP: python CVE-2021-41773.py IPaddress Option -f For IP list in file Example: python CVE-2021-41773.py -f...

F5-BIG-IP

CVE-2020-5902 — F5 BIG-IP TMUI RCE Proof-of-Concept exploit for the critical path-traversal / remote code execution vulnerability in F5 BIG-IP's Traffic Management User Interface TMUI. ⚠️ For authorized penetration testing and security research only. Unauthorized use against systems you do not own...

CVE-2026-49049

CVE-2026-49049 Vulnerability Analysis: Unauthenticated Arbitrary File Write in JoomShaper Helix3 Joomla This repository contains materials, technical analysis, and a Proof of Concept PoC for the critical vulnerability CVE-2026-49049 found in the outdated template framework Helix3 by JoomShaper fo...

CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal

CVE-2025-8088: WinRAR’s Zero-Day Path Traversal — From Zero to Pwn 🗿 Intro – The “Old Friend” Just Got Caught Slipping WinRAR — the dusty classic everyone has installed but no one updates — just got slapped with a high-severity zero-day : CVE-2025-8088. Severity: CVSS v3.1 → 8.8 High Exploited in...

CVE-2025-8088

POC for CVE 2025-8088 WinRAR -o...

httpd-2.4.49

httpd-2.4.49 critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 CVE-2021-42013...

CLEANSTART-2026-YE75739 Previously, resolving relative paths containing parent directory ('

Security vulnerability affects the temporal-server package. Previously, resolving relative paths containing parent directory '...

CLEANSTART-2026-IV86887 Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

Security vulnerability affects the rundeck package. Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through...

CVE-2026-9290

CVE-2026-9290 — WP User Manager LFI to RCE Exploit Pre-Auth Path Traversal via 'tab' Parameter → Local File Inclusion Overview CVE-2026-9290 is a high-severity CVSS 7.5 unauthenticated Local File Inclusion vulnerability in the WP User Manager – User Profile Builder & Membership WordPress plugin ≤...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 How to Run the CVE-2021-41773-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this GitHub repo 3. Go to the Path Traversal folder 4. Run the following commands docker build -t cve-2021-41773-path-traversal . and docker run --rm -d...

PT-2026-107272

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.6.17 Description The @backstage/plugin-proxy-backend package contains improper input validation within the proxy-backend. An authenticated user can craft a request URL that forces the proxy-backend to forward the...

PT-2026-106725

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

Brocade Fabric OS path traversal with USB management privileges (CVE-2026-94580)

: An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary...