CVE-2025-25163-Nuclei-Template

Plantilla de Nuclei para CVE-2025-25163 🚀 Descripción general Este repositorio incluye una plantilla de Nuclei diseñada específicamente para detectar la vulnerabilidad de Path Traversal CVE-2025-25163 en el Plugin A/B Image Optimizer para WordPress. Esta vulnerabilidad representa un riesgo de...

CVE-2025-30208

CVE-2025-30208 Detection Tool Vulnerability Analysis Vite Arbitrary File Read Vulnerability Analysis and Reproduction CVE-2025-30208 Introduction This tool is used to detect whether a target system is vulnerable to CVE-2025-30208. This vulnerability allows an attacker to read sensitive files such...

Grafana-CVE-2021-43798Exp

Grafana V8. Exp de lectura arbitraria de archivos--Script de verificación por lotes multihilo Descripción de la vulnerabilidad Grafana es un conjunto de herramientas de código abierto para análisis y visualización de métricas. A menudo se utiliza para la visualización de datos de series temporale...

SOC_287

SOC287 - Lectura Arbitraria de Archivos en Checkpoint Security Gateway CVE-2024-24919 Resumen Este repositorio contiene un recorrido detallado de la vulnerabilidad CVE-2024-24919 que afecta a Check Point Security Gateways. La vulnerabilidad permite la lectura arbitraria de archivos, exponiendo...

CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

CVE-2021-33558

CVE-2021-33558 Reference: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 Payload: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

Vite-CVE-2025-30208-EXP

CVE-2025-30208 Detection Tool Vulnerability Analysis CVE-2025-30208 is an arbitrary file read vulnerability in the Vite development server. Attackers can read sensitive server files such as /etc/passwd or C:\windows\win.ini by constructing special paths e.g., @fs prefix. This tool supports...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Control de acceso incorrecto - Listado de directorio Descripción : Una vulnerabilidad de listado de directorio en School Fees Management System v1.0 permite a los atacantes enumerar directorios y archivos sensibles dentro de la aplicación sin...

cve-2021-41773

CVE-2021-41773 – Apache Path Traversal Report Summary Vulnerability found in Apache HTTP Server 2.4.49 that can expose sensitive files on the system through a Path Traversal attack depending on the web server configuration Path Traversal: An attacker can access files outside the web root using...

CVE-2024-42992

CVE-2024-42992 Python Pip Pandas v2.2.2 has been found to contain an arbitrary file Pip Pandas all versions - =2.2.2 An arbitrary file read vulnerability exists in the "pandas" library, allowing an attacker to read any file in the file system without restrictions. This vulnerability enables...

CVE-2023-40028

Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a vulnerability in Ghost CMS that allows arbitrary file reads through improper file handling. This PoC demonstrates how the exploit works under controlled conditions. Educational use only. Reference: Adapted from the original PoC by...

CVE-2025-70819

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/hetc:rw in a compose file...

CVE-2026-82651 SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff

SiYuan before v3.8.1 does not apply the IsForbiddenAbsPath guard introduced in GHSA-c8r8-95hg-mp34 to the /history/path and /repo/diff/path endpoints in kernel/server/serve.go. These routes require admin authentication but construct file paths independently, so an authenticated administrator can...

CVE-2026-82650 SiYuan before v3.8.1 Path Traversal via /api/template/render

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function kernel/model/template.go, reachable via the POST /api/template/render endpoint kernel/api/template.go. The endpoint restricts the supplied path only to the workspace directory...

EUVD-2026-68236

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function kernel/model/template.go, reachable via the POST /api/template/render endpoint kernel/api/template.go. The endpoint restricts the supplied path only to the workspace directory...

CVE-2026-82650

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function (kernel/model/template.go), reachable via the POST /api/template/render endpoint. The endpoint restricts the supplied path to the workspace directory (util.IsAbsPathInWorkspace) but, unli...

CVE-2026-82650 SiYuan before v3.8.1 Path Traversal via /api/template/render

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function kernel/model/template.go, reachable via the POST /api/template/render endpoint kernel/api/template.go. The endpoint restricts the supplied path only to the workspace directory...

CVE-2026-82650 SiYuan before v3.8.1 Path Traversal via /api/template/render

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function kernel/model/template.go, reachable via the POST /api/template/render endpoint kernel/api/template.go. The endpoint restricts the supplied path only to the workspace directory...

PT-2026-83577

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.1 Description An issue exists in kernel/server/serve.go where the IsForbiddenAbsPath guard is not applied to the '/history/path' and '/repo/diff/path' endpoints. Although these endpoints require administrator...

PT-2026-83576

SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the RenderTemplate function kernel/model/template.go, reachable via the POST /api/template/render endpoint kernel/api/template.go. The endpoint restricts the supplied path only to the workspace directory...