CVE-2024-28995

CVE-2024-28995 SolarWinds Serv-U était vulnérable à une vulnérabilité de traversée de répertoire permettant d'accéder à des fichiers sensibles sur la machine hôte. INSTALLATION git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt UTILISATI...

CVE-2024-28995

CVE-2024-28995 PoC SolarWinds Serv-U был подвержен уязвимости обхода каталога, которая позволяла читать конфиденциальные файлы на хост-машине. Поисковые запросы Shodan: product:"Rhinosoft Serv-U httpd" "Serv-U FTP Server" Fofa: app="SolarWinds-Serv-U-FTP" Ссылки...

Cisco-ASA-FTD-Web-Services-Traversal

Vulnérabilité de traversée de chemin des services web des logiciels Cisco Adaptive Security Appliance et Firepower Threat Defense CVE-2020-3452 Utilisation : CVE-2020-3452.py https://target Description de la vulnérabilité : Une vulnérabilité dans l'interface des services web des logiciels Cisco...

CVE-2023-40924

BUGAuthor: YE Затронутая версия: Contec SolarView Compact 6.00 Поставщик: https://www.contecinc.com/ Файл уязвимости: downloader.php Описание: Злоумышленник эксплуатирует уязвимость через downloader.php? Параметр file позволяет читать конфиденциальные файлы через обход каталога. downloader.php?fi...

ApacheSkywalking

ApacheSkywalking ApacheSKywalking SQLi для чтения конфиденциальных файлов...

CVE-2024-24919-Exploit

CVE-2024-24919-Exploit Aperçu Ce dépôt contient un exploit Python pour la CVE-2024-24919, une vulnérabilité qui permet de lire des fichiers sensibles depuis la page vulnérable. Cet exploit vérifie d'abord si la cible est vulnérable, puis récupère le chemin que vous spécifiez. Sévérité : Critique...

CVE-2024-36991

CVE-2024-36991 Vulnérabilité de traversée de chemin dans Splunk Enterprise sur les versions Windows inférieures à 9.2.2, 9.1.5 et 9.0.10 permettant la lecture de fichiers sensibles...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

EUVD-2026-72910

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

PT-2026-78521

Name of the Vulnerable Software and Affected Versions Cisco BroadWorks affected versions not specified Description An issue in the Open Client Interface OCI XML Parser allows an unauthenticated remote attacker to read sensitive configuration information. This occurs because the parser improperly...

CVE-2021-47942: Improper Limitation of a Pathname to a Restricted Directory

Home Assistant Community Store HACS prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint. Attackers can retrieve the .storage/auth file containing user credentials and refresh...

CVE-2025-14610

CVE-2025-14610 : The WordPress plugin TableMaster for Elementor (versions up to and including 1.3.6) is vulnerable to authenticated SSRF via the csv_url parameter in the Data Table widget. An attacker with Author-level access or higher can trigger web requests to arbitrary locations (including lo...

PT-2026-2346

Warning: Multiple High Severity Vulnerabilities in React-Router. CVE-2025-61686, CVE-2026-22029, CVE-2026-59057 & others. Attackers can read sensitive files or hijack sessions! Patch Patch Patch More info: https://t.co/jRGNAD4XZZ...

EUVD-2019-2261

Malware in sbrugna...

EUVD-2024-46425

Malicious code in bioql PyPI...

CVE-2025-53097: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent's searchfiles tool did not respect the setting to disable reads outside of the VS Code workspace. This means that an attacker who was able to inject a prompt into the agent coul...

CVE-2024-5178

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability i...

CVE-2020-35580

A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBl...

VulnCheck KEV: CVE-2024-5178

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability i...

CVE-2024-5178

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability i...