135491 matches found
CVE-2021-1675
Explanation of the vulnerability The Printer Spooler is a Windows service that manages print queues. It receives jobs submitted by the user, converts them to a format the printer understands, and sends them when the printer is available. It runs as a system service spoolsv.exe with high privilege...
CVE-2019-20085
📂 CVE-2019-20085 – TVT NVMS-1000 Directory Traversal Exploit By Z3R0 Author: Z3R0 CVE: CVE-2019-20085 Target: TVT NVMS-1000 all known versions prior to patch Vuln Type: Unauthenticated Directory Traversal Date: Insert Your Release Date 🔍 Vulnerability Summary TVT's NVMS-1000 software contains a...
CVE-2020-29254
CVE-2020-29254 TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. ========================== Cross-Side-Request-Forgery CSRF: TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. This could allow an unauthenticated, remote attacker to conduct a...
CVE-2022-30333
A proof of concept for CVE-2022-30333 - a path traversal vulnerability in unRAR versions prior to 6.11. I created this as a demonstration of the exploit for an AttackerKB writeup, and hope to incorporate it in a Metasploit Module soon! Basically, you provide a target including path traversal and...
CVE-2025-1661
CVE-2025-1661 - Unauthenticated Local File Inclusion LFI in HUSKY – Products Filter Professional for WooCommerce Description The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion LFI in all versions up to and including 1.3.6.5 via the...
insect
insect - Web path discovery Current Release: v1.4 20222.09.03 An advanced command-line tool designed to brute force directories and files in webservers, AKA web path scanner Idea by @maurosoria and @shelld3v Developement-2022 is being actively developed by @nu11secur1ty Table of Contents...
Nimbus Vestige
Nimbus Vestige NV A forensic reconstruction engine for cloud and identity incident response. Given fragmented cloud, SaaS, and identity telemetry — control-plane logs, sign-in events, token and consent activity — NV reconstructs how an intrusion most likely moved across accounts and services,...
CVE-2024-34102
CVE-2024-34102 Usage python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...
CVE-2025-6218-POC
CVE-2025-6218 Proof of Concept POC Overview This repository contains a simple Proof of Concept POC for CVE-2025-6218 , demonstrating the exploitation of a vulnerability involving WinRAR’s handling of archive extraction paths. The POC batch script creates a ZIP archive that places a batch file int...
CVE-2021-41773
CVE-2021-41773 scanner This script tests for the path traversal and local file inclusion vulnerability in Apache version 2.4.29, this script doesn't return local files, it merely scans the web server and tells you if it's vulnerable or not. Usage: python3 cve-2021-41773-scanner.py IPv4 address...
CVE-2021-41773
CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49 This issue only affects Apache 2.4.49 and not earlier versions. MORE INFO https://pentesterguruji-notes.notion.site/CVE-2021-41733-f58b52f484b94671b319c107ac2739bf...
CVE-2024-27462
CVE-2024-27462 Wondershare MobileTrans 4.5.6 - Unquoted Service Path Description: Wondershare Filmora versions 4.5.6 and lower contain multiple unquoted service path which allow attackers to escalate privileges to the system level. Impacted services WsAppService3 service binary Path C:\Program...
Offensive
Offensive technologies course This repository contains descriptions of several vulnerabilities and the code that exploits them. Exploitable environments can be found in /dockerfiles/victim folder. Attacker environments can be found in /dockerfiles/attacker folder. Everything comes as Docker image...
CVE-2021-41773
CVE-2021-41773 Path Traversal for Apache 2.4.49 Affected base time: 22:49 06/10/2021 Usage IP python3 CVE-2021-41773.py -i 10.10.10.10 -s List of ips python3 CVE-2021-41773.py -l /home/ac1d/Documents/code/python/CVE-2021-41773/ips.txt -s Screenshot...
PoC-Apache-CVE-2021-41773-Infrastructure-LAB
Apache CVE-2021-41773 — Lab Docker PoC Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...
CVE-2025-8088
Security Analysis: Path Traversal Exploitation in WinRAR CVE-2025-8088 Note: Repository under development. This project will receive future updates with additional analyses, analysis scripts non-exploit, and presentation material. New versions will be published as soon as they are available. This...
CVE-2021-38819
CVE-2021-38819...
shirocrack
shirocrack Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956. Let's keep this short CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository that allows an unauthenticated attacker with network access to the server to read...
cve-2025-64446-fortiweb-exploit
CVE-2025-64446 Fortinet FortiWeb Path Traversal RCE Exploit A security research tool for detecting and testing the CVE-2025-64446 vulnerability in Fortinet FortiWeb Web Application Firewall WAF. This critical zero-day path traversal vulnerability has been actively exploited in the wild and allows...