Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-27210_NodeJS_Path_Traversal_Exploit — (PoC) CVE-2025-27210, a precise Path Traversal vulnerability affecting Node.js applications running on Microsoft Windows. This vulnerability leverages the specific way Windows handles reserved device file names | Kitploit
Tools/GitHubGitHub/absholi7ly/cve-2025-27210_nodejs_path_traversal_exploit
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubabsholi7ly/cve-2025-27210_nodejs_path_traversal_exploit

CVE-2025-27210_NodeJS_Path_Traversal_Exploit

(PoC) CVE-2025-27210, a precise Path Traversal vulnerability affecting Node.js applications running on Microsoft Windows. This vulnerability leverages the specific way Windows handles reserved device file names

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
211 year agoNot yet reviewed

CVE-2025-27210_NodeJS_Path_Traversal_Exploiter

Proof of Concept CVE-2025-27210, a precise Path Traversal vulnerability affecting Node.js applications running on Microsoft Windows. This vulnerability leverages the specific way Windows handles reserved device file names (e.g., AUX, CON, NUL) when combined with directory traversal sequences (../) within file paths processed by functions like path.join() or path.normalize().

root@kitploit:~
python CVE-2025-27210_NodeJS_Path_Traversal_Exploiter.py  -t http://localhost:3000/download -f C:\\Windows\System32\drivers\etc\hosts

Node.js

Node.js

The vulnerability was reported by: @theoblivionsage https://x.com/theoblivionsage | https://hackerone.com/oblivionsage

Download Tool