EUVD-2026-66225

Trestle is vulnerable to arbitrary file write via path traversal in author generate commands Incomplete fix of CVE-2026-46345...

CVE-2026-97323

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

CVE-2026-77578

CVE-2026-77578 — Xibo CMS Arbitrary Local File Read Overview CVE-2026-77578 is an authenticated Arbitrary Local File Read vulnerability in Xibo CMS. An authenticated user with Admin privileges or Module Templates access can import a crafted XML template containing a path-based asset with a...

CVE-2026-53519

Lab CVE-2026-53519 - Nezha Dashboard pre-auth path traversal Lab tai hien lo hong pre-auth path traversal via/dashboard.. prefix confusion trong Nezha Dashboard, dan toi leak jwtsecretkey - forge JWT - chiem quyen admin. Moi truong Docker, tach A/B theo version de so sanh vuln vs patched...

CVE-2026-74239

CVE-2026-74239: Windows path traversal in style archive import XenForo before 2.3.13 is vulnerable to path traversal in style archive imports on Windows. What happens The importer accepts ZIP members under upload/ and rejects names containing the forward-slash form /../. It does not normalize or...

vault-cve-2026-5006-audit

CVE-2026-5006 toolkit HCSEC-2026-32 Two tools for working through the Vault templated-policy slash-injection vulnerability: an interactive walkthrough for explaining and scoping the issue, and an audit script that checks a live cluster and writes the findings to Markdown...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Keras HDF5 ExternalLink local file-content disclosure Two public Keras APIs — keras.saving.KerasFileEditor and keras.saving.loadweights / — read HDF5 group members by without a link-type check. h5py / on indexing, so an attacker-supplied , , or file containing only a link causes...

Project-CVE-2026-75604

Next.js Windows Cache Traversal Security Research Defensive security research and authorized validation only. This repository concerns CVE-2026-75604 , a critical vulnerability that may permit unauthenticated remote code execution on certain Windows-hosted Next.js deployments. Credits Coded by:...

CVE-2026-21962

CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Plug-in Access-Control Bypass via URI Normalization Inconsistency An independently reproduced exploit and analysis for CVE-2026-21962 improper access control, CVSS 10.0 in Oracle HTTP Server / the Oracle WebLogic Server Proxy Plug-in for...

By-Poloss..-..CVE-2026-18080

CVE-2026-18080 — ERP Complete HR, Accounting & CRM Suite = 1.17.7 Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment Path Traversal → RCE...

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup Restore Arbitrary File Write Vulnerability Summary A critical arbitrary file write vulnerability exists in the backup restoration functionality of Halo CMS versions up to 2.25.4. The restoreWorkdir method in MigrationServiceImpl.java copies the workdir/ directory from a...

CVE-2026-97323

A path traversal vulnerability exists in the File Upload component of YunaiV/zhijiantianya ruoyi-vue-pro (up to version 2026.08). The flaw resides in the getOriginalFilename function within the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.ja...

EUVD-2026-86405

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

CVE-2026-97323 YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

WordPress SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SSL Zen versions = 4.7.42...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

CVE-2026-26336-PoC

CVE-2026-26336 — Alfresco Share Unauthenticated File Read Overview Alfresco Share exposes a /share/page/resource/ endpoint used to serve static resources. In vulnerable versions, this endpoint does not properly restrict path traversal, allowing an unauthenticated attacker to read arbitrary files...

cve-2026-39440-funnelforms-fix

CVE-2026-39440 FunnelForms Fix A drop-in WordPress plugin that blocks the vulnerable Demo Import handler in FunnelForms Pro ≤ 3.8.1 to mitigate Remote Code Execution CVE-2026-39440, CVSS 9.9. The Vulnerability Field| Value ---|--- CVE ID| CVE-2026-39440 CVSS Score| 9.9 Critical Affected|...

CVE-2026-21440

CVE-2026-21440 Advanced detection-only PoC for CVE-2026-21440 affecting AdonisJS BodyParser. No exploitation included. CVE-2026-21440 – AdonisJS Advanced Detection PoC Description This project provides an advanced detection-only Proof of Concept PoC for CVE-2026-21440 , a critical Path Traversal ...

CVE-2025-63298

CVE-2025-63298 A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling...