http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Script NSE de Nmap para lectura remota no autorizada de archivos en Cisco ASA y FTD...

Jenkins-CVE-2024-23897-Lab

Jenkins CVE-2024-23897 Lab Arbitrary file read vulnerability in Jenkins 2.441 and earlier. Launch docker-compose up -d Automated Attack docker exec -it attacker-host ./auto-exploit.sh Manual Attack docker exec -it attacker-host bash cd /tmp curl -o jenkins-cli.jar...

CVE-2024-24919---Poc

CVE-2024-24919 PoC una Prueba de Concepto de CVE-2024-24919 Lea sobre ello - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 La vulnerabilidad permite a un atacante remoto no autenticado leer el contenido de un archivo arbitrario ubicado en el dispositivo afectado. Descripción Potencialmente...

CVE-2021-41278

CVE-2021-41277 Metabase arbitrary file read vulnerability batch scanning tool Affected versions: metabase version = 1.0.0, = 0.40.5 metabase version = 1.40.5 Usage usage: CVE-2021-41277.py -h -u URL -f FILE CVE-2021-41277 optional arguments: -h, --help show this help message and exit -u URL, --ur...

Nuclei-Template-CVE-2024-1561

CVE-2024-1561 Nuclei Template This Nuclei template is designed to detect the Gradio CVE-2024-1561 vulnerability in web applications. Gradio is a Python library for creating customizable UI components around machine learning models. This vulnerability may allow attackers to read files from the...

cve-2017-0065

Explotando el controlador de URL read:// de Edge Introducción Este exploit fue reportado a Microsoft y fui reconocido por hacerlo. El exploit fue parcheado el 14 de marzo de 2017 bajo los nombres CVE-2017-0065 y MS17-007 y no funcionará si los parches relacionados están aplicados. El código fuent...

CVE-2022-44268-fixed-PoC

Versión corregida de CVE-2022-44268 Algunos PoCs no funcionan para contenidos de archivo específicos. Este PoC puede funcionar para contenidos que no funcionan con otros PoCs. Instalación Clona este repositorio con Git. Luego, instala los requisitos. pip install -r requirements.txt Uso Para...

Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Análisis de Alerta SOC: Lectura Arbitraria de Archivos en Checkpoint Security Gateway CVE-2024-24919 Introducción CVE-2024-24919 es una vulnerabilidad crítica de día cero en Check Point Security Gateways que permite a atacantes remotos no autenticados leer archivos arbitrarios de los sistemas...

CVE-2020-19360

CVE-2020-19360 PoC de lectura arbitraria de archivos en Fhem Búsqueda en FOFA title=="Home, Sweet Home" Uso: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com Prueba de URL individual python3 Fhem.py -f url.txt Detección por lotes Aviso Una vez completado el escaneo, se generará...

CVE-2020-5902

Readme F5 BIG-IP lectura arbitraria de archivos + ejecución remota de comandos RCE +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...

CVE-2021-43798

GrafanaArbitraryFileRead Uso 1. Mostrar información ❯ go run main.go -s INF VulnInfo: "Name": "Grafana Arbitrary File Read", "VulID": "nil", "Version": "1.0", "Author": "z3", "VulDate": "2021-12-07", "References": "https://nosec.org/home/detail/4914.html" , "AppName": "Grafana", "AppPowerLink":...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Questo programma è un exploit per cve-2018-8453. Piattaforma di sviluppo\test: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utilizza Palette per leggere/scrivere il kernel Avvertenza importante: questo strumento è destinato esclusivamente alla ricer...

spectre-attack-demo

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

EUVD-2026-94978

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

CVE-2026-107614

GlavSoft TightVNC Server for Windows versions before 2.8.88 are vulnerable to an integer underflow in the WinCursorShapeUtils::trimTransparent() function. When a cursor shape with a width or height of zero is processed on the DXGI capture path , the loop bound width - 1 wraps to 0xFFFFFFFF. This ...

EUVD-2026-94975

An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to read heap memory beyond the palette allocation and crash the viewer by sending ZRLE-encoded tiles whose palette indices exceed the declared...

CVE-2026-107611

GlavSoft TightVNC Viewer for Windows before version 2.8.88 is vulnerable to an out-of-bounds read in its ZRLE decoder . The issue occurs because the readPaletteRleTile() and readPackedPaletteTile() functions fail to validate attacker-supplied indices against the declared palette size. A malicious...

CVE-2026-16161

The IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an out-of-bounds read (CWE-125). This flaw could allow a remote attacker to cause a denial of service (DoS) impact. No specific exploit...

EUVD-2026-94966

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

grafana-exploit-CVE-2021-43798

grafana-exploit-CVE-2021-43798 Acerca de ¿Para qué se utiliza este exploit? se utiliza para la vulnerabilidad de lectura arbitraria de archivos no autorizada en Grafana CVE-2021-43798 permite acceder a archivos locales mediante directory traversal recorrido de directorios ¿Para qué versiones de...