CVE-2024-24919-Sniper

CVE-2024-24919-Sniper نظرة عامة CVE-2024-24919 Sniper هو برنامج نصي بلغة Python مصمم لفحص ثغرات كشف المعلومات في جدار الحماية Check Point Security Gateway. يمكن لهذا البرنامج النصي إجراء فحص لكل من الأهداف الفردية والمتعددة، باستخدام تعدد الخيوط لتحسين سرعة الفحص. وهو يدعم خيارات متنوعة لسطر...

esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Удаленное чтение файлов Этот скрипт демонстрирует, как эксплуатировать уязвимость в системах, использующих библиотеку iconv, при некорректной обработке преобразований кодировок символов, описанную в CVE-2024-2961. Он позволяет злоумышленнику читать произвольные файлы с сервера,...

auto-cve-2022-44268.sh

auto-cve-2022-44268 Автоматизация эксплуатации CVE-2022-44268 — произвольное чтение файлов в ImageMagick Первоначальное исследование: https://www.metabaseq.com/imagemagick-zero-days/ Репозиторий PoC: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC Описание ImageMagick...

CVE-2015-2166-EXPLOIT

CVE-2015-2166 - ثغرة اجتياز الدليل في منصة تقديم الخدمات المتنقلة Ericsson Drutt MSDP CVE-2015-2166 هي ثغرة اجتياز دليل تؤثر على مراقب المثيلات في منصة تقديم الخدمات المتنقلة Ericsson Drutt MSDP الإصدارات 4 و5 و6. تسمح الثغرة للمهاجمين عن بُعد بقراءة ملفات عشوائية على النظام المتأثر من خلال استغل...

http-vuln-cve2020-3452.nse

http-vuln-cve2020-3452.nse CVE-2020-3452 : Cisco ASA و FTD قراءة ملفات عن بعد غير مصرح بها Nmap NSE Script...

DEBIAN-CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

CVE-2026-17615

CVE-2026-17615 is an XML External Entity (XXE) vulnerability in RESTEasy's SourceProvider component. The root cause is that SourceProvider.writeTo() creates a SAXParser without disabling external entity resolution. An unauthenticated attacker can exploit this by sending a specially crafted XML bo...

CVE-2026-17615 Resteasy-core: resteasy sourceprovider remote unauthenticated file read

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

EUVD-2026-68654

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

cosmicsting-cve-2024-34102-exploit

مجموعة استغلال CosmicSting CVE-2024-34102 مجموعة استغلال كاملة لـ CVE-2024-34102 – ثغرة CosmicSting XXE في Adobe Commerce / Magento 2.4.x. تفاصيل الثغرة CVE : CVE-2024-34102 CVSS 9.8 النوع : حقن كيانات خارجية XML XXE التأثير : قراءة ملفات عن بُعد بدون مصادقة، تزوير طلبات الخادم SSRF، إمكانية تنفي...

Linux Distros Unpatched Vulnerability : CVE-2026-17615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending ...

CVE-2026-56718

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service. An unauthenticated remote attacker can supply path traversal sequences in the HTTP request URI on port 80 to read arbitrary files with root privileges . Exposed data inclu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: obs-server (UTSA-2026-093616)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093616 advisory. a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled Th...

CVE-2026-73498

creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:05+00:00| published-proof-of-concept| https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-g5r6-gv6m-f5jv 2026-08-12 23:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswacrdtft22...

EUVD-2026-57422

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

CVE-2026-47754

CVE-2026-47754 affects Metacat 2.x (including 2.19.1) and all 1.x versions, with an unauthenticated path traversal in the archiveEntryName parameter of the action=read endpoint. The bug stems from ArchiveHandler.readArchiveEntry() concatenating user input into a filesystem path and a disabled has...

CVE-2026-72688 OpenSignLabs opensignserver - Missing Authentication for Critical Function

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...