175356 matches found
CVE-2022-44900-demo-lab
CVE-2022-44900 Demo lab Demo webapp vulnerable to CVE-2022-44900. CVE-2022-44900 is a directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier that allow attackers to read and write arbitrary files on the local machine via...
CVE-2026-108582
The software GenOffice (versions through 0.11.505) is vulnerable to an incorrect permissions flaw in its HTTP MCP server file store . This vulnerability allows local unprivileged users to read uploaded and generated documents by listing the world-readable genoffice-mcp-http directory located in t...
EUVD-2026-96365
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
CVE-2026-108582
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
CVE-2026-108581
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain...
CVE-2019-19204
CVE-2019-19204 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantula Team,...
CVE-2024-23334
CVE-2024-23334 Exploit and PoC This repository contains a Proof of Concept PoC exploit for CVE-2024-23334, demonstrating a vulnerability in a web application that allows unauthorized access to sensitive files on the server. The PoC includes a Dockerized web server and an exploit script to test fo...
Exploit for Improper Privilege Management in Microsoft
CVE-2026-69414 — Microsoft Malware Protection Engine EoP Explo...
W3TotalChache
W3TotalChache Testing for CVE-2019-6715 Arbitrary File Read/ CVE-2024-12365 SSRF/Info Disclosure usage: python3 w3tcscanner.py -u https://example.com -f /etc/passwd -d 3 import requests import argparse from urllib.parse import urlparse def checkw3tcversionurl: try: response = requests.geturl,...
CVE-2024-7627
Exploit for CVE-2024-7627 — Bit File Manager WordPress Unauthenticated RCE Exploit 📌 Description This repository contains a proof-of-concept PoC exploit for CVE-2024-7627 , a critical Unauthenticated Remote Code Execution RCE vulnerability in the Bit File Manager WordPress plugin versions 6.0 –...
php_filter_chains_oracle_exploit_for_CVE-2023-6199
PHP filter chains: file read from error-based oracle. Updated Script to exploit CVE-2023-6199 A CLI to exploit parameters affected by the file read caused by the the error-based oracle of PHP filter chains. It can be used to leak the content of a local file when passed to vulnerable functions, su...
ghostcat-verification
Ghostcat verification CVE-2020-1938 Summary A new exploit called Ghostcat has been found CVE-2020-1938, see the articles on snyk and tenable for details and analysis of the exploit itself. In my case, I wanted to verify which Tomcat servers are exploitable and if so how does it manifest itself. S...
CVE-2026-98375
A flaw was found in the Linux kernel's Xen network frontend driver. This vulnerability allows a malicious host backend to cause a Denial of Service DoS by transmitting incoming network packets with an incomplete Ethernet header. Because the driver fails to verify that incoming packet buffers meet...
exploit-CVE-2023-27564
Exploit for CVE-2023-27564 This vulnerability allows anonymous file read in n8n. import requests url = "https://example.com/rest/data/filesystem:..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd:.svg" response = requests.geturl printresponse.statuscode printresponse.headers...
CVE-2023-40028
CVE-2023-40028 Exploit This script exploits a vulnerability in Ghost CMS, allowing arbitrary file read through symbolic link abuse. Features Creates a symlink to the target file Compresses the payload into a ZIP file Uploads the ZIP file via the Ghost API Reads the file through an accessible imag...
CVE-2024-43044-jenkins-creds
Intro This is an exploit for CVE-2024-43044, an arbitrary file read that allows an agent to fetch files from the controller. The exploit will use the vulnerability to read credentials.xml file and get secret keys to decrypt it. Initial code : https://github.com/convisolabs/CVE-2024-43044-jenkins...
Grafana-8.3-Directory-Traversal
Script en Python para CVE-2021-43798 Descripción: Directory Traversal en Grafana 8.3.0 Prueba esto si EDB-ID 50581 no funciona! Artículo Original: https://ethicalhacking.uk/cve-2021-43798-dissecting-the-grafana-path-traversal-vulnerability/gsc.tab=0 Durante una máquina en OffSec Proving Ground...
CVE-2026-101894
CVE-2026-101894 — @xhmikosr/decompress symlink-chain path traversal Python 3 PoC for CVE-2026-101894 — Node.js archive extraction in @xhmikosr/decompress and unmaintained decompress allows read/write outside the output directory via a chain of symlink entries. Bypass of CVE-2026-53486 hardening...