110427 matches found
WordPress Grand Spa theme <= 3.5.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Grand Spa versions = 3.5.3...
WordPress Grand Car Rental theme <= 3.7.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Grand Car Rental versions = 3.7.2...
CVE-2026-72593 dulldusk phpfm - Missing Authentication by Default Allows Full Filesystem Access
A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server filesystem...
EUVD-2026-55214
An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter = array and no authentication enabled by default authpass is empty string,...
CVE-2026-72592 dulldusk phpfm - Unauthenticated Remote Code Execution via Unrestricted PHP File Upload
An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter = array and no authentication enabled by default authpass is empty string,...
CLSA-2026-1786346242 TuxCare security update for guzzlehttp/psr7 (1 CVE)
TuxCare rebuilt guzzlehttp/psr7 to address 1 CVE. Fixed in 1.9.1-p2+tuxcare...
CVE-2026-16985
The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the uploadfiles capability Author and above to write an executable PHP file into the uploads directory and achiev...
PHP Utility Belt - ajax.php RCE Detection
Detects PHP Utility Belt RCE by writing info.php via ajax.php code= parameter and verifying phpinfo output. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Utility Belt ajax.php code execution.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
w-CMS - userFunctions.php RCE Detection
Detects w-CMS 2.0.1 RCE by writing phpinfo via userFunctions.php and fetching /public/. !/usr/bin/env python3 -- coding: utf-8 -- """w-CMS userFunctions.php arbitrary PHP write RCE.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...
TikiWiki - jhot.php Upload Detection (CVE-2006-4602)
Detects CVE-2006-4602 by uploading a PHP file via /jhot.php and verifying phpinfo under /img/wiki/. !/usr/bin/env python3 -- coding: utf-8 -- """TikiWiki jhot.php arbitrary PHP upload CVE-2006-4602.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...
CVE-2026-16985 Squeeze < 1.7.12 - Author+ Arbitrary File Upload
The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the uploadfiles capability Author and above to write an executable PHP file into the uploads directory and achiev...
CVE-2026-16985
The Squeeze WordPress plugin versions prior to 1.7.12 is vulnerable to an arbitrary file upload flaw. The issue stems from a failure to validate the file type or extension of per-size image data during certain attachment-update actions. This allows users with the upload_files capability (Author l...
EUVD-2026-55014
The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the uploadfiles capability Author and above to write an executable PHP file into the uploads directory and achiev...
PT-2026-80572
The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...
PT-2026-69854
Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.18 Description In installations using SQLite, the navigation menu endpoint improperly handles array-typed user input. This flaw bypasses input sanitization, allowing the input to break out of an internal quoted strin...
CVE-2026-72592: Unrestricted Upload of File with Dangerous Type
An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server. The application ships with an empty upload extension filter = array and no authentication enabled by default authpass is empty string,...
PT-2026-69941
Name of the Vulnerable Software and Affected Versions Cachet versions prior to 2.4.2 Description An issue exists in incident template rendering that allows authenticated users to perform server-side template injection. By creating malicious incident templates using Blade directives or Twig filter...
CVE-2026-69118: Improper Neutralization of Special Elements Used in a Template Engine
Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code. Attackers can create malicious incident templates with Blade directives or Twig filters that execute system commands when...
PT-2026-69355
Name of the Vulnerable Software and Affected Versions Squeeze WordPress plugin versions prior to 1.7.12 Description Insufficient validation of file types or extensions during attachment-update actions allows users with the upload files capability, such as those with Author privileges and above, t...