CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

CVE-2021-33558

CVE-2021-33558 참고: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 페이로드: root@kitploit: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

CVE-2025-30208

Outil de détection CVE-2025-30208 Analyse de vulnérabilité Analyse et reproduction de la vulnérabilité de lecture arbitraire de fichiers de Vite CVE-2025-30208 Introduction Cet outil permet de détecter si le système cible est vulnérable à la CVE-2025-30208. Cette vulnérabilité permet à un attaqua...

CVE-2024-42992

CVE-2024-42992 Python Pip Pandas v2.2.2 foi descoberto contendo uma vulnerabilidade de leitura de arquivo arbitrário Pip Pandas todas as versões - =2.2.2 Existe uma vulnerabilidade de leitura de arquivo arbitrário na biblioteca "pandas", que permite a um atacante ler qualquer arquivo no sistema d...

CVE-2023-40028

Proof of Concept PoC für CVE-2023-40028 CVE-2023-40028 ist eine Schwachstelle in Ghost CMS, die durch unsachgemäße Dateiverarbeitung das beliebige Lesen von Dateien ermöglicht. Dieses PoC demonstriert, wie der Exploit unter kontrollierten Bedingungen funktioniert. Nur für Bildungszwecke. Referenz...

Grafana-CVE-2021-43798Exp

Grafana V8. Exp per lettura arbitraria di file -- Script di verifica batch multithread Descrizione della vulnerabilità Grafana è una suite open source per l'analisi e la visualizzazione di metriche. Viene spesso utilizzata per la visualizzazione di dati di serie temporali dell'infrastruttura e pe...

Vite-CVE-2025-30208-EXP

CVE-2025-30208 Strumento di rilevamento Analisi della vulnerabilità CVE-2025-30208 è una vulnerabilità di lettura arbitraria di file nel server di sviluppo Vite. Un attaccante può leggere file sensibili del server come /etc/passwd o C:\windows\win.ini costruendo percorsi speciali es. prefisso @fs...

SOC_287

SOC287 - Lettura Arbitraria di File su Checkpoint Security Gateway CVE-2024-24919 Panoramica Questo repository contiene un'analisi dettagliata della vulnerabilità CVE-2024-24919 che colpisce i Check Point Security Gateway. La vulnerabilità consente la lettura arbitraria di file, esponendo...

CVE-2023-49981

CVE-2023-49981 Sistema de Gestão de Taxas Escolares v1.0 - Controle de Acesso Incorreto - Listagem de Diretórios Descrição : Uma vulnerabilidade de listagem de diretórios no Sistema de Gestão de Taxas Escolares v1.0 permite que atacantes listem diretórios e arquivos sensíveis dentro da aplicação...

cve-2021-41773

CVE-2021-41773 – Apache Path Traversal Bericht Zusammenfassung Schwachstelle in Apache HTTP Server 2.4.49, die je nach Webserver-Konfiguration durch einen Path-Traversal-Angriff den Zugriff auf sensible Systemdateien ermöglicht Path Traversal: Ein Angreifer kann Pfade mit ../ verwenden, um auf...

CVE-2025-25163-Nuclei-Template

قالب Nuclei لـ CVE-2025-25163 🚀 نظرة عامة يحتوي هذا المستودع على قالب Nuclei مصمم خصيصًا لاكتشاف ثغرة Path Traversal CVE-2025-25163 في إضافة Plugin A/B Image Optimizer لووردبريس. تشكل هذه الثغرة خطرًا أمنيًا حرجًا، حيث تسمح بالوصول غير المصرح به إلى ملفات الخادم الحساسة. 🔍 وصف الثغرة CVE-2025-251...

CVE-2026-60083 SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access othe...

CVE-2026-14978

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

PT-2026-78386

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description The software writes content backup ZIP archives to the web-accessible document root at the endpoint 'content.zip', which exposes sensitive files such as database credentials. Unauthenticated attacke...

CVE-2026-72820

Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...

CVE-2026-72820

Grav prior to 2.0.13 is vulnerable to a backup profile path traversal issue. The root-path validation fails when a hard-coded deny-list is not applied, allowing attackers who have profile editor access to configure backup profiles with traversal paths that can archive or expose files from outside...

PYSEC-2026-3516 PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API

Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agentfile field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agentfile field in...

Linux Distros Unpatched Vulnerability : CVE-2026-50163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the...

Symlink Attack

Overview org.webjars.npm:decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Symlink Attack in the symlink handling process. An attacker can create arbitrary symbolic links outside the intended extraction directory by crafting an...

CVE-2026-59807

CVE-2026-59807 affects Composio SDK prior to 0.2.32-beta.283. A path validation bypass in readFileFromDisk (tool-file-uploads.ts) can enable an attacker to read and exfiltrate sensitive files by manipulating file_uploadable parameters via prompt injection, referencing sensitive paths such as SSH ...