LionWiki <3.2.12 - Local File Inclusion

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. id: CVE-2020-27191 info: name: LionWiki 3.2.12 - Local File Inclusion author: 0xAkoko severity: high description: LionWiki before...

BOA Web Server 0.94.14 - Arbitrary File Access

BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...

Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to and including 1.7.1 via the templateredirect function. The plugin registers 'hippooserve' as a WordPress query variable and uses it to serve PWA files from the pwa/ directory. In...

Lodash Template - Server-Side Template Injection (RCE)

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. id: CVE-2021-23337 info: name: Lodash Template - Server-Side Template Injection RCE author: DhiyaneshDk severity: high description: | Lodash versions prior to 4.17.21 are vulnerable to Command Injectio...

Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

CVE-2014-6271-Shellshock-

Shellshock（CVE-2014-6271）の悪用：完全で現代的なデモンストレーションラボ Shellshock（CVE-2014-6271）は、これまでに発見された中で最も影響力のあるリモートコード実行の脆弱性の1つです。この欠陥はBashに影響を及ぼし、攻撃者は環境変数に細工したペイロードを注入するだけで任意のコマンドを実行できます。 このガイドでは、以下を使用した完全で再現可能なデモンストレーションを提供します： Kali Linux （攻撃者） Metasploitable2 （ターゲット） curl 、Burp Suite 、Netcat...

CVE-2026-0920-

CVE-2026-0920- LA-Studio Element Kit for Elementor 📡 エクスプロイトはここで最初に公開されます。 Telegram で @KNxploited をフォロー — 新しく公開された CVE、動作する PoC、精密なセキュリティ研究のためのエリートフィード。絶え間なく更新。先を行く人のために作られました。 🧠 概要 CVE-2026-0920 は、WordPress プラグイン LA-Studio Element Kit for Elementor で発見された CVSS 9.8 Critical の脆弱性です。 この欠陥は、AJAX...

CVE-2026-102607-ZoneMinder

安全漏洞报告：ZoneMinder exportEvents 中的操作系统命令注入 摘要 ZoneMinder 的事件导出功能中存在一个经过身份验证的操作系统命令注入漏洞。exportFile HTTP 请求参数未经清理就被传入通过 PHP 的 exec 执行的 shell 命令中，允许任何拥有 View Events 权限的已认证用户在服务器上执行任意操作系统命令。 此漏洞可导致以 Web 服务器用户（www-data）身份实现完整的远程代码执行（RCE）。 严重程度 CVSS v3.1 评分： 8.8.（高） CVSS 向量：...

FiberBreak

FiberBreak CVE-2025-55182 React2Shell のためのエクスプロイトフレームワーク - React Server Components の重大な RCE 脆弱性 概要 CVE : CVE-2025-55182 CVSS : 10.0 重大 タイプ : リモートコード実行 RCE 影響を受けるバージョン : React 19.0.0-rc.0 から 19.0.0, Next.js 15.0.0 から 15.0.3 発見者 : Lachlan Miller SonarSource 公開 PoC : maple3142 インストール Clone repositor...

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-46242 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix epremove struct eventpoll / struct file UAF...

OpenSTA-Exploit

OpenSTA-Exploit Data| Detail ---|--- CVE ID| CVE-2025-69212 Vuln Score| critical 9.4 CWE| 78: Improper Neutralization of Special Elements used in an OS Command Affected Versions| OpenSTAManager ' SHELL.php" maliciousfile = f'invoice.p7m";cmd;echo "...

74CMS - Remote File Inclusion

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. id: CVE-2020-29279 info: name: 74CMS - Remote File Inclusion author: DhiyaneshDK severity: critical description: | PHP remote file...

PT-2026-104547

Name of the Vulnerable Software and Affected Versions WPFront Notification Bar versions prior to 3.5.2 Description Reflected Cross-Site Scripting occurs when the write debug logs debug-log output path reflects the raw value of the $ SERVER'REQUEST URI' variable through the vprintf function within...

PT-2026-104583

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description A server-side request forgery SSRF issue exists where attackers with permissions to register or modify OAuth 2.0 clients can force the server to fetch internal resources. This occurs through the use ...

Security update for rustup (important)

openSUSE security update: security update for rustup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22016-1 Rating: important References: bsc1230032 bsc1243862 bsc1249008 bsc1257902 bsc1270186 bsc1270521 bsc1270619 bsc1270644 bsc1270795 bsc1270870...

PT-2026-104494

Name of the Vulnerable Software and Affected Versions Groundhogg — CRM, Newsletters, and Marketing Automation versions prior to 5.0 Description Privilege escalation is possible through contact identity rebinding. The create contact function in the POST /gh/v3/contacts endpoint is only protected b...

Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

Summary The Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to perform arbitrary LLM requests without authentication. This can be exploited by a malicious...

GHSA-H46J-26Q3-RGGF Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

Summary The Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to perform arbitrary LLM requests without authentication. This can be exploited by a malicious...

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

Summary: 5 findings — BashTool shell-injection sink F6, the canonical RCE primitive, BackgroundRunTool async shell-injection sink F7, backtest execmodule runs top-level statements before the SignalEngine class check F8 — independent RCE path that does not match BashTool signatures, readurl outbou...

GHSA-JQMF-MX4F-HFR6 Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

Summary: 5 findings — BashTool shell-injection sink F6, the canonical RCE primitive, BackgroundRunTool async shell-injection sink F7, backtest execmodule runs top-level statements before the SignalEngine class check F8 — independent RCE path that does not match BashTool signatures, readurl outbou...