grep -l "LFI" ./machines [3] sorted: date ▼

namediffosdatetags

VariaType medium linux 2026-03-14 Exploited fonttools CVE-2025-66034 designspace path traversal to write a PHP webshell, escalated to user via FontForge archive command injection, then root via setuptools PackageIndex arbitrary file write to cron.d. fonttools·cve-2025-66034·path-traversal·php-injection·lfi·git-exposure·+5 Pterodactyl medium linux 2026-02-07 Unauthenticated RCE via Pterodactyl Panel LFI (CVE-2025-49132), credential reuse for SSH, then privilege escalation via PAM session injection (CVE-2025-6018) chained with udisks2 XFS resize race condition (CVE-2025-6019) to obtain root. cve-2025-49132·lfi·pearcmd·rce·cve-2025-6018·cve-2025-6019·+6 Facts easy linux 2026-01-31 Exploited CamaleonCMS path traversal (CVE-2024-46987) to extract MinIO credentials and an encrypted SSH key, then escalated via sudo facter --custom-dir to root. camaleoncms·cve-2024-46987·lfi·minio·ssh key cracking·facter sudo abuse

no machines match that filter