check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

Rails-doubletap-RCE

Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...

CVE-2025-8088

CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...

CVE-2021-41773

Vulnerable docker images for CVE-2021-41773 Apache path traversal This vulnerabiltiy only applies to version 2.4.49 that have specific non-default configs. In certain situations this can result in either file read or code execution. https://twitter.com/ptswarm/status/1445376079548624899 Vulnerabl...

CVE-2022-45988

CVE-2022-45988 StarSoftComm HP CooCare An elevation of privilege vulnerability exists I have contacted with hp-security-alert They have fixed this bug. About StarSoftComm CooCare HP-PSRT-IR 4106 The vendor responded with the following information: Follow these steps to update: 1. Launch eService ...

cve-2026-27483

CVE-2026-27483 MindsDB 경로 탐색을 통한 RCE PoC 이 PoC 스크립트는 다음 GitHub 권고를 기반으로 합니다. 기본적으로 MindsDB는 인증을 사용하지 않습니다 PoC는 인증되지 않은 모드와 인증된 모드를 모두 지원합니다 /api/handlers/를 쿼리하여 사용 가능한 핸들러를 찾고, 설치되지 않은 핸들러 이름을 사용합니다. PoC는 /venv/lib/python3.10/site-packages/pip/init.py를 덮어씁니다. 파이썬 리버스 셸이 위 경로에 작성된 후 트리거됩니다. python...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard Directory Traversal SAP NetWeaver is SAP’s integrated technology platform and the technical foundation of all SAP applications since SAP Business Suite. SAP NetWeaver is a service-oriented application and integration platform that provid...

CVE-2021-3019

CVE-2021-3019 LanProxy Directory Traversal Lanproxy is an intranet penetration tool that proxies LAN personal computers and servers to the public network. It supports tcp traffic forwarding and supports any tcp upper layer protocol access to intranet websites, local payment interface debugging, s...

CVE_2024_42007

CVE-2024-42007 - php-spx Path Traversal Exploit This repository contains a Python 3 proof-of-concept PoC script for CVE-2024-42007. Vulnerability Summary: php-spx = 0.4.15 suffers from a path traversal vulnerability via the SPXUIURI parameter, allowing unauthenticated attackers to read arbitrary...

CVE-2026-36848

CVE-2026-36848 A critical path traversal vulnerability was identified in the web-based management engine on port 8089 of Gigamon-VUE OS GVOS appliances. This flaw exists in the legacy H-VUE subsystem within the persistd daemon and allows an unauthenticated, remote attacker with network access to...

CVE-2023-50164-ApacheStruts2-Docker

CVE-2023-50164 : Apache Struts 2 vulnerable Docker container Apache has recently released an advisory regarding CVE-2023-50164, a critical vulnerability with a severity rating of 9.8 that affects Apache Struts 2. CVE-2023-50164 is intricately tied to an organization's Apache Struts architecture a...

CVE-2024-4956

CVE-2024-4956 Nexus Repository Manager 3 Unauthenticated Path Traversal...

CVE-2025-49144_PoC

CVE-2025-49144PoC 📌 CVE-2025-49144 is a high-severity local privilege escalation vulnerability found in the Notepad++ v8.8.1 and prior version installers. This vulnerability stems from uncontrolled executable search path behavior during installation, allowing a local attacker to gain SYSTEM-level...

Afuzz

Afuzz - An automated web path fuzzing tool Afuzz is an automated web path fuzzing tool for the Bug Bounty projects. Afuzz is being actively developed by @rapiddns Features Afuzz automatically detects the development language used by the website, and generates extensions according to the language...

CVE-2024-1303---Badgermeter-moni-tool-Path-Traversal

CVE-2024-1303 --- Badgermeter moni tool - Path-Traversal https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1303: 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | CWE-22. Software link : https://www.s-can.at/en/product/monitool/...

CVE-2024-36104-PoC

CVE-2024-36104-PoC CVE-2024-36104에 대한 개념 증명PoC으로, Apache OFBiz 18.12.14 이전 버전 의 인증되지 않은 원격 코드 실행 취약점입니다. OFBiz의 ControlServlet은 요청 경로를 정규화하기 전에 인증되지 않은 뷰forgotPassword를 해석합니다. /%2e/%2e/를 추가하면 경로가 다시 /webtools/control/로 축소되므로, 요청은 원래 뷰와 연결된 보안/권한 검사를 전혀 거치지 않고 ProgramExport 뷰에 도달합니다. 이후...

CVE-2021-41773

RCE exploit both for Apache 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013: IMHO only "special" setups will be vulnerable to this RCE. Same happens for the "arbitrary file read" exploits you have seen. Both CVEs are indeed almost the same path-traversal vulnerability 2nd one is the uncomplete fi...

vulnerable-mcp-servers-lab

취약한 MCP 서버 랩 이 저장소는 의도적으로 취약하게 만든 Model Context Protocol MCP 서버로컬 및 원격 구현을 포함합니다. 각 서버는 자체 폴더에 있으며 기능 , 실행 방법 , 취약점 시연/공격 방법 에 대한 자세한 내용이 포함된 전용 README.md 파일을 제공합니다. 통제된 랩 환경 외부에서 실행하지 마십시오. 이 저장소의 용도 일반적인 MCP 서버 및 도구 통합 실패 모드에 대한 보안 교육/연구. 취약한 MCP 서버가 데이터 노출, 명령어 삽입, 공급망 손상, 코드 실행으로 이어질 수 있는 방법에...

winrar_CVE-2023-38831_lazy_poc

winrarCVE-2023-38831lazypoc lazy way to create CVE-2023-38831 winrar file for testing Article that mentioned this vuln and the sample: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ version of winrar i was using is winrar 5.91.0 I took a malicious winrar file...

CVE-2023-52076-PoC

CVE-2023-52076-PoC CVE-2023-52076에 대한 개념 증명PoC으로, MATE 데스크톱 환경에 영향을 주는 Atril/Xreader 문서 뷰어의 치명적인 경로 탐색 및 임의 파일 쓰기 취약점입니다. 이 스크립트는 SSH 구성 또는 자동 시작 데스크톱 항목을 대상으로 하는 zip-slip 경로가 포함된 조작된 EPUB 페이로드를 생성하여, 대상 시스템에서 원격 코드 실행을 가능하게 합니다. 기능 1. SSH 키 주입 또는 자동 시작 RCE의 두 가지 공격 모드를 지원합니다. 2. SSH 모드 전용 RSA 키페...