POC_CVE-2024-10829

POCCVE-2024-36420 Local reproduction lab and nuclei template draft for CVE-2024-36420 affecting Flowise. Summary CVE-2024-36420 is an arbitrary file read in Flowise caused by unsanitized use of the fileName body parameter in: POST /api/v1/openai-assistants-file This lab was used to validate:...

CVE-2024-23897

Jenkins File Read Vulnerability - CVE-2024-23897 CVE-2024-23897 is a critical vulnerability in Jenkins that allows unauthenticated attackers to read arbitrary files on the Jenkins controller's file system. This flaw arises from improper handling of command arguments in the args4j library,...

CVE-2026-42154

CVE-2026-42154 CVE-2026-42154 — Prometheus Remote Read Snappy DoS...

CVE-2020-1938TomcatAjpScanner

CVE-2020-1938TomcatAjpScanner Batch scan for Tomcat AJP vulnerability Vulnerability Details On January 6, 2020, the National Information Security Vulnerability Sharing Platform CNVD included the Apache Tomcat file inclusion vulnerability CNVD-2020-10487, corresponding to CVE-2020-1938. Attackers...

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE Injection ⚠️ DISCLAIMER THIS TOOL IS EXCLUSIVELY FOR EDUCATIONAL AND RESEARCH PURPOSES This exploit is intended exclusively for authorized red team operations, penetration testing, and security research on systems where you have explicit written...

awesome-jenkins-rce-2019

awesome-jenkins-rce-2019 There is no pre-auth RCE in Jenkins since May 2017, but this is the one! It chains CVE-2018-1000861, CVE-2019-1003005 and CVE-2019-1003029 to a more reliable and elegant pre-auth remote code execution! Affect list ANONYMOUSREAD disable Jenkins version 2.138 ANONYMOUSREAD...

CVE-2020-29134

Totvs Fluig Platform root@kitploit: Fluig is the productivity and collaboration platform that integrates with the ERP system, and your company's other systems to revolutionize the way you and your team work. CVE-2020-29134 root@kitploit: The TOTVS Fluig platform allows path traversal via paramete...

CVE-2022-44311

Out-Of-Bounds Read in html2xhtml : CVE-2022-44311 Summary Html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafte...

CVE-2024-48914

This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...

vivo-root-build

PD2415 6.6.89 Full-Flow Candidate This source is based on the same-device/same-SoC PD2415 6.6.57 IonStack engine: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. The dumpstate carrier closure is retained from the validated PD2241 method. The archived 6.6.89 target keeps...

CVE-2006-3392

CVE-2006-3392 About the vulnerability A vulnerability has been reported in Webmin and Usermin, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an unspecified error within the handling of an URL. This can be exploited to...

poc-yaws-dav-xxe

XXE in Yaws web server CVE-2020-24379 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Then run: root@kitploit: curl -i -s -k -X LOCK http://localhost:8000...

CVE-2019-18426

This was originally published on PerimeterX company's official Github through my work Github account. Eventhough this is my work - all rights and legal concerns belong to PerimeterX company. WhatsApp Vulnerabilities Disclosure - Open Redirect + CSP Bypass + Persistent XSS + FS read permissions +...

CVE-2026-7482-PoC

CVE-2026-7482: Ollama Heap Out-of-Bounds Read 1-Day PoC This repository contains a 1-day Proof of Concept PoC exploitation chain for CVE-2026-7482 , an unauthenticated Out-of-Bounds OOB Read vulnerability in Ollama's GGUF model loader versions prior to 0.17.1. Note: This is a 1-day research...

CVE-2026-26336-PoC

CVE-2026-26336 — Alfresco Share Unauthenticated File Read Overview Alfresco Share exposes a /share/page/resource/ endpoint used to serve static resources. In vulnerable versions, this endpoint does not properly restrict path traversal, allowing an unauthenticated attacker to read arbitrary files...

CVE-2021-21017

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bug : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl !=...

desc_race-1

descrace "descrace" CVE-2021-30955 exploit for iOS 15.0 - 15.1.1 with stable kernel r/w primitives Exploit Method 1. Increase the capacity of IOSurfaceClient array to 0x2000, goal is to write a pointer whose content is totally controlled and then use IOSurfaceRootUserClient interfaces to achieve...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...

CVE-2021-43798-poc

CVE-2021-43798-poc Grafana8.x Arbitrary File Read python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...

CVE-2026-31431

copy.fail — AFALG AEAD splice primitive CVE-2026-31431 Overview This project is a C port of the original Python prototype, by offsecguy. It leverages the Linux kernel crypto API AFALG using: authencesnhmacsha256,cbcaes AEAD mode MSGMORE flag splice system call The technique feeds data from a...