exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 101 - 125 of 4,263

File Inclusion Files

Drupal H5P Module 2.0.0 Zip Slip Traversal

Posted Dec 5, 2022

Authored by EgiX | Site karmainsecurity.com

Drupal H5P Module versions 2.0.0 and below suffer from a traversal vulnerability when handling a zipped filename on windows.

tags | exploit, file inclusion

systems | windows

SHA-256 | 29cd61d23f4b78dbb93cdc479cba570c70b094e72db31910170d0c3eb73d58f8

Download | Favorite | View

AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 Path Traversal

Posted Nov 11, 2022

Authored by Jens Regel

AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 suffers from a path traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2022-23854

SHA-256 | a78de92013681ef6d9eab5f28cda6712397f5a30d67a7a27854785925a87f96a

Download | Favorite | View

SAP Manufacturing Execution Core 15.3 Path Traversal

Posted Oct 17, 2022

Authored by RedRays

SAP Manufacturing Execution Core versions 15.1 through 15.3 suffer from a path traversal vulnerability.

tags | advisory, file inclusion

advisories | CVE-2022-39802

SHA-256 | d2c66b61de7a4021d8a7f4c40b09c163f1f708ce3aa8581767e5edaefd4cc198

Download | Favorite | View

PhotoSync 4.7 Local File Inclusion

Posted Sep 19, 2022

Authored by Chokri Hammedi

PhotoSync version 4.7 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | f5e6b3cd183e91afacf647b3547160e0d93026087e059f1843c8761cd5e32985

Download | Favorite | View

Owlfiles File Manager 12.0.1 Path Traversal / Local File Inclusion

Posted Sep 19, 2022

Authored by Chokri Hammedi

Owlfiles File Manager version 12.0.1 suffers from local file inclusion and path traversal vulnerabilities.

tags | exploit, local, vulnerability, file inclusion

SHA-256 | 5e1df728b64bebf1797218fca034b9eeed532e773c31131307d679d65b406b40

Download | Favorite | View

InTouch Access Anywhere Secure Gateway 2020 R2 Path Traversal

Posted Sep 9, 2022

Authored by Jens Regel | Site crisec.de

InTouch Access Anywhere Secure Gateway versions 2020 R2 and below suffer from a path traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2022-23854

SHA-256 | c9873dff912c339fc99f6c1c0d26c32ecee59d977893de8864d051af5bba5038

Download | Favorite | View

@Drive 2.8 Local File Inclusion

Posted Sep 9, 2022

Authored by Chokri Hammedi

@Drive version 2.8 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 1c242342304c59d9a82db2eb45e80f971e783004a6b81e805655fb5adc09c690

Download | Favorite | View

FE File Explorer 11.0.4 Local File Inclusion

Posted Sep 7, 2022

Authored by Chokri Hammedi

FE File Explorer version 11.0.4 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 9596719bde6a381ce9f18435b2517e8ecf2d1838ab031974d2c37d361f760254

Download | Favorite | View

FTPManager 8.2 Local File Inclusion / Directory Traversal

Posted Sep 7, 2022

Authored by Chokri Hammedi

FTPManager version 8.2 suffers from local file inclusion and directory traversal vulnerabilities.

tags | exploit, local, vulnerability, file inclusion

SHA-256 | 3e761447e17269780279f6f239a28cde76f4d7d642e4fd2bf87303f7df3f583c

Download | Favorite | View

Wifi HD Wireless Disk Drive 11 Local File Inclusion

Posted Sep 6, 2022

Authored by Chokri Hammedi

Wifi HD Wireless Disk Drive version 11 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | b20518edc15d62d991e82375c15b066d88b50865b9271eeedc4ac3a8e580a204

Download | Favorite | View

FLIR AX8 1.46.16 Traversal / Access Control / Command Injection / XSS

Posted Aug 19, 2022

Authored by Samy Younsi, Thomas Knudsen

FLIR AX8 versions 1.46.16 and below suffer from command injection, directory traversal, improper access control, and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, file inclusion

advisories | CVE-2022-37060, CVE-2022-37061, CVE-2022-37062, CVE-2022-37063

SHA-256 | d4b0fa3d39bb7d9eb67520d399557821deb5682ab4e0f91e473b5af510fec4d7

Download | Favorite | View

uftpd 2.10 Directory Traversal

Posted Aug 2, 2022

Authored by Aaron Esau

uftpd versions 2.7 through 2.10 suffer from an authenticated directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2020-20277

SHA-256 | 49eb3cd8623927e2347974445c0565c0ed3386c36a6f12fc4e148713a5029fd8

Download | Favorite | View

Omnia MPX 1.5.0+r1 Path Traversal

Posted Aug 1, 2022

Authored by Momen Eldawakhly

Omnia MPX version 1.5.0+r1 suffers from a path traversal vulnerability.

tags | exploit, file inclusion

SHA-256 | 255a6f7727bdeaa16975148c3367339b2e812a601460e5e6e74bd1dfbe0dd441

Download | Favorite | View

CuteEditor For PHP 6.6 Directory Traversal

Posted Aug 1, 2022

Authored by Stefan Hesselman

CuteEditor For PHP version 6.6 suffers from a directory traversal vulnerability.

tags | exploit, php, file inclusion

SHA-256 | 7af1d2df53c59d35bae895eb4619ecd262232aacf7df548b05790ea206f4dec7

Download | Favorite | View

mPDF 7.0 Local File Inclusion

Posted Aug 1, 2022

Authored by Musyoka Ian

mPDF version 7.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | d9e2013ea0d6ee6260c03fe9651f945af86d37023bb012c16b218a5ba2c4c1f8

Download | Favorite | View

SolarView Compact 6.00 Directory Traversal

Posted Jun 3, 2022

Authored by Ahmed Alroky

SolarView Compact version 6.00 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2022-29298

SHA-256 | 76fa7594e9d56713a54e10432aeac724bc02a1a6c903e3b19cb19936c489db0c

Download | Favorite | View

WordPress User Meta Lite / Pro 2.4.3 Path Traversal

Posted May 30, 2022

Authored by Julien Ahrens | Site rcesecurity.com

WordPress User Meta Lite and Pro plugin versions 2.4.3 and below suffer from a path traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2022-0779

SHA-256 | 9f5dfc7d061a12ed0156906753e063fd8b488898a8f4b2709039a9ee6f78125f

Download | Favorite | View

Jupiter / JupiterX Theme Privilege Escalation / LFI / DoS / Access Control Issues

Posted May 18, 2022

Authored by Ramuel Gall | Site wordfence.com

Jupiter Theme versions 6.10.1 and below as well as JupiterX Core plugin versions 2.0.7 and below suffer from privilege escalation and post deletion vulnerabilities. JupiterX Theme versions 2.0.6 and below as well as JupiterX Core versions 2.0.6 and below suffer from plugin deactivation and setting modification flaws. JupiterX Theme versions 2.0.6 and below as well as Jupiter Theme versions 6.10.1 and below suffer from path traversal and local file inclusion vulnerabilities. Jupiter Theme versions 6.10.1 and below suffer from an arbitrary plugin deletion vulnerability. JupiterX Core plugin versions 2.0.6 and below suffer from information disclosure, modification, and denial of service vulnerabilities.

tags | advisory, denial of service, arbitrary, local, vulnerability, file inclusion, info disclosure

advisories | CVE-2022-1654, CVE-2022-1656, CVE-2022-1657, CVE-2022-1658, CVE-2022-1659

SHA-256 | 99977b76ad75b06f3f800ae91ea38ee20b0d9091a394d12146ce6e1c875bc515

Download | Favorite | View

IpMatcher 1.0.4.1 Server-Side Request Forgery

Posted May 16, 2022

Authored by Sick Codes, Kelly Kaoudis

IpMatcher versions 1.0.4.1 and below for .NET Core 2.0 and .NET Framework 4.5.2 incorrectly validates octal and hexadecimal input data which can lead to indeterminate server-side request forgery, local file inclusion, remote file inclusion, and denial of service vectors.

tags | exploit, remote, denial of service, local, file inclusion

advisories | CVE-2021-33318

SHA-256 | 98c5f3ee4fded068839fc2a03bbd74be24dce6bd2b2774a8a477b3d476489bb1

Download | Favorite | View

DLINK DAP-1620 A1 1.01 Directory Traversal

Posted May 11, 2022

Authored by Momen Eldawakhly

DLINK DAP-1620 A1 version 1.01 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2021-46381

SHA-256 | afc86a4ac9803168c3b340a707e44de908ed61a99b24127201ce6cfc66f250d0

Download | Favorite | View

Bookeen Notea BK_R_1.0.5_20210608 Directory Traversal

Posted May 11, 2022

Authored by Clement Maillioux

Bookeen Notea version BK_R_1.0.5_20210608 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2021-45783

SHA-256 | b4f8088f63e0dd6deba0af400660ae6e9b5dffa1b7c6532d16deb85373a705e6

Download | Favorite | View

Razer Sila 2.0.418 Local File Inclusion

Posted Apr 11, 2022

Authored by Kevin Randall

Razer Sila versions 2.0.441_api through 2.0.418 suffer from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 6363e3e4801fa8c1578d66fb8a359d85cf16f7ebcee3a51f79ee9dadf54e6098

Download | Favorite | View

Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 Local File Inclusion

Posted Apr 11, 2022

Authored by Momen Eldawakhly

Franklin Fueling Systems Colibri Controller Module version 1.8.19.8580 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

advisories | CVE-2021-46417

SHA-256 | f45a40ee7fe8f2f856deb113c48a0f102823cf6b887757553709163f470b6fe5

Download | Favorite | View

School Club Application System 1.0 Local File Inclusion

Posted Apr 8, 2022

Authored by Hejap Zairy

School Club Application System version 1.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 17bd0d3cb7cf42228054c107ccf213c2496968d88f3c3985ba246a2b46d81dc6

Download | Favorite | View

CSZCMS 1.3.0 SSRF / LFI / Remote Code Execution

Posted Apr 7, 2022

Authored by Hejap Zairy

CSZCMS version 1.3.0 server-side request forgery exploit that leverages local file inclusion to inject a remote shell.

tags | exploit, remote, shell, local, file inclusion

SHA-256 | 076778f725ea205cb5e59b34e6f765677401b4867ef7f2cfb8b18d6f76bd956a

Download | Favorite | View