filessh

FileSSH Un explorador de archivos basado en TUI para servidores SSH, que te permite navegar y gestionar archivos en un servidor remoto, editarlos en el mismo lugar y descargar directorios de forma recursiva con recorrido paralelo de directorios. También tiene la capacidad de iniciar rápidamente...

CVE-2026-42638

Unauthenticated Broken Access Control in Easy Digital Downloads = 3.7.1 versions...

EUVD-2026-93060

Unauthenticated Broken Access Control in Easy Digital Downloads = 3.7.1 versions...

CVE-2026-42638

The Easy Digital Downloads WordPress plugin versions

CVE-2026-42638 WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Easy Digital Downloads = 3.7.1 versions...

Easy Digital Downloads - Privilege Escalation

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1. id: CVE-2023-30869 info: name: Easy Digital Downloads - Privilege Escalation author: daffainfo severity: critical...

WordPress Candidate Application Form <= 1.3 - Local File Inclusion

WordPress Candidate Application Form = 1.3 is susceptible to arbitrary file downloads because the code in downloadpdffile.php does not do any sanity checks. id: CVE-2015-1000005 info: name: WordPress Candidate Application Form = 1.3 - Local File Inclusion author: dhiyaneshDK severity: high...

WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection

WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL injection vulnerability in the s parameter of its edddownloadsearch action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

Z-Downloads < 1.11.7 - Cross-Site Scripting

The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript. id: CVE-2024-8673 info: name: Z-Downloads 1.11.7 - Cross-Site Scripting author: Splint3r7 severity: low description: | The plugin does not properly validate uploaded files...

WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. id: CVE-2024-5057 info: name: WordPress Easy Digital Downloads = 3.2.12 - SQL Injecti...

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

BitLeak

BitLeak BitLeak es una herramienta en Python que verifica y muestra descargas de torrents vinculadas a una dirección IP determinada. git clone https://github.com/AnkhCorp/BitLeak.git pip3 install -r requirements.txt python bitleak.py...

hget

hget Este proyecto es mi proyecto personal para aprender Golang y construir algo útil. Estado de compilación : Instalación $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install El archivo binario se generará en ./bin/hget. Puedes copiarlo a /usr/bin o...

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

axios-ssrf

Comenzar ejecuta pnpm install en los directorios raíz, backend y frontend ejecuta pnpm start:dev en el directorio raíz Vulnerabilidades Este sitio web está publicado en: https://axios-ssrf.onrender.com/ Server Side Request Forgery: Utilicé específicamente una versión de axios que es vulnerable a...

EUVD-2026-91432

Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block downloading of valid blocks by leaving rejected hashes in SentHashes. Attackers can send a contextually invalid block sharing an honest block's header hash, causing Request::KnownBlock to sk...

SUSE CVE-2025-8042

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

Chromium CVE-2026-87503: Inappropriate implementation in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-100823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157. CVE-2026-100823 Note that Nessus relies on the...

EUVD-2026-89117

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...