NgoAnhDuc

3 exploits Active since Jan 2026
CVE-2020-37214 EXPLOITDB HIGH text WORKING POC
Voyager 1.3.0 - Path Traversal via Asset Path Parameter
Voyager 1.3.0 contains a directory traversal vulnerability that allows attackers to access sensitive system files by manipulating the asset path parameter. Attackers can exploit the path parameter in /admin/voyager-assets to read arbitrary files like /etc/passwd and .env configuration files.
CVSS 7.5
CVE-2021-47776 EXPLOITDB MEDIUM text WORKING POC
Umbraco CMS 8.14.1 - Server-Side Request Forgery via Dashboard and Help Controller Endpoints
Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.
CVSS 5.3
EIP-2026-112901 EXPLOITDB text WORKING POC
UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read