MassCyberCenter-Mentorship-Project-

MassCyberCenter-Mentorship-Project- Overview This repository documents my journey and deliverables during the MassCyber Center mentorship program. This mentorship program tasked us with completing a cybersecurity project and then presenting it at a showcase event attended by cybersecurity...

CVE-2019-6447

️⃣ CVE-2019-6447 🖥️ -h3x0v3rl0rd- ES File Explorer 4.1.9.7.4 - Arbitrary File Read...

CVE-2020-17519

Vulnerable Application This module exploits an unauthenticated directory traversal vulnerability in Apache Flink version 1.11.0 and released in 1.11.1 and 1.11.2 as well, allowing arbitrary file read with the web server privileges Vulnerable version: flink-1.11.0-src.tgz, Verification Steps 1...

CVE-2023-40028

CVE-2023-40028 PoC Exploit Symlink Upload Vulnerability in Ghost CMS Leading to Arbitrary File Read POC Image Vulnerability Details CVE-2023-40028 is a vulnerability in Ghost CMS versions prior to 5.59.1 , where authenticated users can upload symbolic links symlinks that lead to arbitrary file...

CVE-2019-3396

CVE-2019-3396 Confluence Unauthorized RCE CVE-2019-3396 Vulnerability Pitfall: Some versions require adding Referer to succeed File Read root@kitploit: POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: 10.10.20.181 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:55.0 Gecko/20100101...

dirty-pipe-poc

Dirty Pipe POC CVE-2022-0847 POC - https://dirtypipe.cm4all.com/ Description This exploit attempts to use the CVE-2022-0847 vulnerability to overwrite a read only file. When make exploit is run, it will: 1. Create a readonlyfile.txt 2. Execute the dirtypipe exploit. 3. Check if the dirtypipe...

CVE-2026-87997

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in backend/openwebui/main.py copied a client-supplied folderid into a new chat without applying the folder write-access chec...

dirtypipe2

dirtypipe2 Linux Kernel 5.8 5.15.25 - Local Privilege Escalation DirtyPipe 2 Exploit Author: Antonius w1sdom github : https://github.com/bluedragonsecurity web : https://www.bluedragonsec.com tested on : linux kernel 5.13.0-21-generic compiled on lubuntu 20.04.5 linux lubuntu 20.04.2 - linux kern...

CVE-2026-15913

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

CVE-2019-11510

CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...

CVE-2021-43798-grafana_fileread

CVE-2021-43798-grafanafileread If the target is behind a reverse proxy, replace the payload with this one: root@kitploit: url1 = url +"/public/plugins/"+str.rstripplugins+"//../..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/etc/passwd" Grafana is a cross-platform, open-source data visualization web...

CVE-2025-25279

Security Advisory MMSA-2025-00430 / CVE-2025-25279 Summary After uploading a file to Mattermost Boards, when the fileId parameter is modified and the board is copied, the file now points to and downloads the target file specified in the parameter. Affected Versions: Mattermost instances with Boar...

TFTPlunder

TFTPlunder: an exploit for CVE-2023-29930 This is an exploit script for a blind file read / write vulnerability in the Genesys formerly InIn TFTP provisioning server. Vulnerability info This vulnerability is due to unrestricted configuration options for the TFTP root path and file extensions. In...

CVE-2021-29155

This is the Proof Of Concept code for CVE-2021-29155. The range tracking system for pointer arithmetic in the speculative domain was insufficient. It was possible to extract kernel data via a sidechannel. This is a proof of concept you can read up to 0x5fff bytes out of bounds from the last eleme...

Ni8mare

🔒 Ni8mare Scanner Ethical Security Scanner for CVE-2026-21858 Ni8mare Vulnerability "Knowledge is power, but only if shared responsibly." Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability CVSS 10.0 without performin...

CVE-2023-22974

CVE-2023-22974 OpenEMR 7.0.0 Arbitrary File Read...

CVE-2024-9264

🚨 CVE-2024-9264 - Grafana SQL injection leading to Remote Code Execution RCE and file Read Exploit tool for CVE-2024-9264, a critical vulnerability in Grafana allow authenticated attcker to execute sql query leading to RCE 🛡️ This tool is strictly for educational purposes and authorized penetratio...

CVE-2020-1938

cve-2020-1938 1.read file： python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...

CVE-2021-43798-Grafana-POC

CVE-2021-43798: POC de la vulnerabilidad de lectura arbitraria de archivos en Grafana Instrucciones de uso: python3 exp.py IP:PORT...

jira-mobile-ssrf-exploit

CVE-2022-26135 - Full-Read Server Side Request Forgery in Mobile Plugin for Jira Data Center and Server About Assetnote Assetnote automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. This research was performed by Assetnote's...