120847 matches found
WordPress Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion vulnerability
Authenticated Shop Manager+ Path Traversal to File Deletion vulnerability discovered by Wordfence PRISM in WordPress Plugin CTX Feed versions = 6.6.43...
CVE-2026-95273
A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function staticcontent of the file changedetectionio/flaskapp.py of the component visualselectordata. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch...
CVE-2026-95272
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
CVE-2026-93616
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...
CVE-2026-71557
A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...
EUVD-2026-84375
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...
CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...
CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server...
CVE-2026-93616
A pre-authentication directory traversal vulnerability exists in the Check Point Management Web Service , affecting Check Point Security Management and Log Servers. This flaw allows unauthenticated attackers to upload and execute arbitrary scripts, potentially leading to remote code execution . A...
CVE-2025-25163-Nuclei-Template
Nuclei Template for CVE-2025-25163 🚀 Overview This repository features a Nuclei template specifically designed to detect the Path Traversal vulnerability CVE-2025-25163 in the Plugin A/B Image Optimizer for WordPress. This vulnerability poses a critical security risk, allowing unauthorized access...
CVE-2026-95273
dgtlmoon changedetection.io (up to version 0.60.7 ) is affected by a path traversal vulnerability in the static_content function of changedetectionio/flask_app.py, specifically within the visual_selector_data component. By manipulating the filename argument, a remote attacker with low privileges ...
EUVD-2026-84370
A vulnerability was determined in dgtlmoon changedetection.io up to 0.60.7. This impacts the function staticcontent of the file changedetectionio/flaskapp.py of the component visualselectordata. Executing a manipulation of the argument filename can lead to path traversal. It is possible to launch...
CVE-2020-14882-WebLogic-Analysis
Vulnerability Research: Exploitation of the CVE-2020-14882 and CVE-2020-14883 Chain in Oracle WebLogic Server The repository contains a technical report Write-up and a conceptual Proof of Concept PoC demonstrating the chained Authentication Bypass and Remote Code Execution RCE vulnerabilities in...
CVE-2017-12637_SAP-NetWeaver-URL-Traversal
CVE-2017-12637SAP-NetWeaver-URL-Traversal Proof-of-concept LFI Scanner: Automated detection of /etc/passwd exposures via directory traversal and regex matching. root@kitploit: LFI Scanner A lightweight Python proof-of-concept to scan target hosts for Local File Inclusion LFI vulnerabilities by...
apache-vulnerable
Scan FOR APACHE versions "ZERO-DAY" Apache Version 2.4.49 and 2.4.50 CVE-2021-41773 and CVE-2021-42013 How to use : You Will need nuclei ! https://github.com/projectdiscovery/nuclei Check local nuclei install and verify template nuclei -t apache-vulnerable-versions.yaml -vv and nuclei -t...
CVE-2026-95272 dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
CVE-2026-95272
CVE-2026-95272 affects dgtlmoon changedetection.io up to version 0.60.7 , specifically the static_content function in changedetectionio/flask_app.py within the Screenshot Handler component. Manipulation of the filename argument enables a path traversal vulnerability, allowing remote attackers wit...
EUVD-2026-84365
A vulnerability was found in dgtlmoon changedetection.io up to 0.60.7. This affects the function staticcontent of the file changedetectionio/flaskapp.py of the component Screenshot Handler. Performing a manipulation of the argument filename results in path traversal. It is possible to initiate th...
CVE-2007-4559
PoC or Exploit for CVE-2007-4559 A malicious TAR archive can include file paths like ../../../../etc/passwd, which try to "climb up" out of the intended extraction folder. If a Python script uses tarfile.extract or extractall without checking the file paths, it will unpack files to those location...
CVE-2015-3306
CVE-2015-3306 ProFTPD Exploit This repository contains a Python proof-of-concept PoC exploit for CVE-2015-3306 ⚠️ Warning: Only use this against systems you own or have explicit permission to test. Unauthorized exploitation is illegal. Author Mohamed EL-KHAROUATI Part 1: CVE-2015-3306 ProFTPD...