Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112269. PoCs published by Aodrulez.
AI-analyzed exploit summary The exploit details a vulnerability in Snif 1.5.2 where a null byte injection bypasses file extension checks, allowing unauthorized download of PHP files despite security settings. The analysis includes vulnerable code snippets and a proof-of-concept URL demonstrating the bypass.
Description
Snif 1.5.2 - Any Filetype Download
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Aodrulez · textwebappsphp
https://www.exploit-db.com/exploits/11309
The exploit details a vulnerability in Snif 1.5.2 where a null byte injection bypasses file extension checks, allowing unauthorized download of PHP files despite security settings. The analysis includes vulnerable code snippets and a proof-of-concept URL demonstrating the bypass.
Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:
Snif (Simple And Nice Index File) 1.5.2
No auth needed
Prerequisites:
Access to the Snif script URL
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026