esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

Pichome 2.1.0 - Arbitrary File Read

A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...

Eclipse Mojarra - Local File Read

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter. id: CVE-2020-6950 info: name: Eclipse Mojarra - Local File Read author: iamnoooob,pdresearch severity: medium description: | Directory traversal in Eclipse Mojarra...

Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter

Dolibarr ERP/CRM versions 23.0.4 through 24.0.0 contain an authorization bypass vulnerability in document.php and viewimage.php. The public share-link feature forces NOLOGIN when hashp is present, but the value 'shared' skips token resolution while the override still fires for any non-empty hashp...

Vitest Browser Mode - Local File Read

Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host- true, an attacker can send a request to that handler from remote to get th...

ghostcat

该工具利用 Apache Tomcat 中的一个 LFI 漏洞（CVE-2020-1938），不仅可以查看敏感文件，还可以运行恶意的 JSP 载荷。 可在此处下载（需要从命令行运行） 用法： ghostcat target HTTP port AJP port file read/eval...

CVE-2026-85706-PoC-Toolkit

CVE‑2026‑85706 – Kit de herramientas de lectura de archivos no autenticada en GitLab SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, equipos defensivos y pentesters. El acceso no autorizado a...

ApacheSkywalking

ApacheSkywalking Inyección SQL de Apache SkyWalking para leer archivos sensibles...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Lectura no autorizada de archivos en Grafana 0day Parece que el nuevo 0day LFI en Grafana existe gracias al plugin grafana-clock-panel. Basta con enviar una petición GET de la forma: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Descripción general CVE-2026-26980 es una vulnerabilidad de inyección SQL no autenticada en TryGhost Ghost CMS Content API. La ruta...

CVE-2026-98372

A flaw was found in the Linux kernel's IP Traffic Flow Security IP-TFS implementation within the XFRM subsystem. When processing incoming network traffic, a missing boundary check on packet fragment offsets allows an unbounded loop to read memory past the end of an on-stack array. A remote attack...

CVE-2026-98186

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A nearby wireless attacker can exploit this vulnerability by broadcasting crafted Wi-Fi beacon or probe response frames containing an excessively large pairwise cipher count. Because the driver fails to validate this count against the...

VmWare-vCenter-vulnerability

Vulnerabilidades de VMware Lectura arbitraria de archivos no autorizada en VMware vCenter PoC que funciona en versiones anteriores 7.0.2.00100 Consulta de Shodan solo para miembros privados PoC PoC de CVE-2021-21972 | RCE no autorizado en VMware PoC de CVE-2021-21972 PoC de SSRF en VMware | PoC d...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS 认证路径遍历/任意文件读取 CVE-2024-46987 是 Camaleon CMS （一个基于 Ruby on Rails 的内容管理系统）中的一个 经过认证的路径遍历漏洞 （CWE-22）。它允许已登录用户（即使权限较低）通过 MediaControllerdownloadprivatefile 操作读取服务器上的任意文件。 发布时间 ：2024 年 9 月 18 日 CVSS v3.1 ：7.7 高 向量：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CWE...

CVE-2020-1206-POC

CVE-2020-1206 未初始化内核内存读取 POC c 2020 ZecOps, Inc. - https://www.zecops.com - 寻找攻击者的错误 用于检查 CVE-2020-1206 / "SMBleed" 的POC 预期结果：包含目标计算机内核内存的本地文件。 仅用于教育和企业环境测试。 ZecOps 不对代码承担任何责任，使用风险自负。 如果您对用于服务器、终端和移动设备的无代理 DFIR 工具感兴趣，请通过 [email protected] 联系我们，这些工具能够自动检测 SMBleed 及其他类型的攻击。 用法 SMBleed.exe...

EUVD-2025-211053

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

WinboxPoC

WinboxExploit 这是一个针对关键 WinBox 漏洞（CVE-2018-14847）的概念验证，该漏洞允许任意文件读取，从而获取明文密码。 该漏洞早已被修复，因此此项目已终止，不再提供支持或更新。您可以自行 fork 并更新。 博客文章 https://n0p.me/winbox-bug-dissection/ 要求 Python 3+ 此脚本无法在 Python 2.x 或更低版本下运行。 使用方法 该脚本通过命令行中的简单参数使用。 WinBox TCP/IP 利用漏洞并读取密码。 python3 WinboxExploit.py PORT 示例： $ python3...

CVE-2021-28476

CVE-2021-28476：vmswitch.sys 中的“Microsoft Hyper-V 远程代码执行漏洞” 这是 CVE-2021-28476（“Hyper-V 远程代码执行漏洞”）的概念验证，该漏洞是 vmswitch.sys（ 网络虚拟化服务提供程序 ）中的任意内存读取问题，微软于 2021 年 5 月进行了修补。 该漏洞由 @australeo、@ergot86、@peleghd 和 @OphirHarpaz 发现。客户虚拟机通过 VMBus（一种 用于分区间通信的基于通道的通信机制 ）发送恶意 RNDIS 数据包即可触发该漏洞。 以下是主机 系统在调试器中崩溃时的样子：...

CVE-2026-75346

An out-of-bounds read vulnerability exists in the EIPStackGroup OpENer software, specifically affecting versions v2.3 and the master branch through commit 76b95cf . The flaw is located in the server-side CIP SetAttributeList service. A remote attacker can exploit this vulnerability to cause a den...