Lucene search
+L

49108 matches found

Kitploit
Kitploit
added 2026/08/27 8:05 a.m.4 views

CVE-2026-5027

यह पोस्ट EQSTLab द्वारा प्रकाशित एक शोध लेख है। Yahia Hamza को धन्यवाद, जिन्होंने इस कमजोरी की रिपोर्ट और विश्लेषण किया। CVE-2026-5027 ★ CVE-2026-5027 Langflow पाथ ट्रैवर्सल / आर्बिट्रेरी फ़ाइल राइट PoC ★ विवरण CVE-2026-5027 : Langflow आर्बिट्रेरी फ़ाइल राइट कमजोरी विवरण: Langflow = 1.8.4 में एक...

8.8CVSS5.5AI score0.31661EPSS
SaveExploits5References1
Patchstack
Patchstack
added 2026/08/27 7:55 a.m.5 views

WordPress AI Engine plugin < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription vulnerability

Subscriber+ Arbitrary File Read via Audio Transcription vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.6...

5CVSS5.2AI score0.00225EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/08/27 7:50 a.m.6 views

CVE-2026-25732-NiceGUI-3.6.1

Autor: Mohammed Idrees Banyamer Kontakt: Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE-2026-25732 — NiceGUI Path Traversal in FileUpload → Beliebiger Datei-Schreibzugriff Exploit-Titel: NiceGUI Path Traversal in FileUpload, der zu beliebigem Datei-Schreibzugriff führt Datu...

7.5CVSS5.2AI score0.03212EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/27 7:45 a.m.5 views

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration Il plugin per WordPress Migration, Backup, Staging – WPvivid Backup & Migration è vulnerabile al caricamento arbitrario di file non autenticato nelle versioni fino alla 0.9.123 inclusa. Ciò è dovuto a una gestione impropria degli errori nel processo d...

9.8CVSS9AI score0.32714EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/27 7:33 a.m.4 views

CVE-2021-43798

CVE-2021-43798 Grafana – Nicht autorisiertes Lesen beliebiger Dateien Am 4. Dezember 2021 veröffentlichte ein Sicherheitsforscher eine Schwachstelle zum Lesen beliebiger Dateien in Grafana im Internet. Nicht autorisierte Angreifer können diese Schwachstelle nutzen, um sensible Dateien auf dem...

7.5CVSS8.6AI score0.88503EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/08/27 7:18 a.m.5 views

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Catena completa n8n Lettura arbitraria di file non autenticata → Forgiatura token admin → Bypass sandbox → RCE Catena RCE completa non autenticata su n8n: 1. CVE-2026-21858 - Confusione Content-Type → Lettura arbitraria di file 2. Lettura config + database →...

10CVSS9AI score0.99105EPSS
SaveExploits45
Kitploit
Kitploit
added 2026/08/27 7:16 a.m.7 views

cve-2026-21440-writeup-poc

cve-2026-21440 path traversal verso scrittura arbitraria di file in @adonisjs/bodyparser panoramica esiste una vulnerabilità critica di path traversal nel pacchetto @adonisjs/bodyparser che consente a un attaccante remoto di scrivere file arbitrari al di fuori della directory di upload prevista...

9.2CVSS8.9AI score0.01049EPSS
SaveExploits3
Vulnrichment
Vulnrichment
added 2026/08/27 7:06 a.m.7 views

CVE-2026-81572 Local Privilege Escalation in CodeMeter Runtime on Windows

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

7.8CVSS6AI score0.00166EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 6:57 a.m.4 views

CVE-2026-3844

CVE-2026-3844 — Breeze Cache RCE Caricamento File Arbitrario Non Autenticato → Esecuzione di Codice Remoto...

9.8CVSS8.8AI score0.27701EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/08/27 6:56 a.m.4 views

CVE-2026-33725

CVE-2026-33725 Una proof-of-concept per CVE-2026-33725, una Remote Code Execution e Arbitrary File Read tramite H2 JDBC INIT Injection nell'importazione di serializzazione EE in Metabase. Versioni Vulnerabili Metabase Enterprise ≥ v1.47 e v1.54.22 Metabase Enterprise ≥ v1.54.0 e v1.54.22 Metabase...

7.2CVSS7.4AI score0.00763EPSS
SaveExploits1
EUVD
EUVD
added 2026/08/27 6:31 a.m.6 views

EUVD-2026-66379

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

7.5CVSS5.6AI score0.00258EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 6:22 a.m.4 views

CVE-2026-3844

CVE-2026-3844 — Breeze Cache = 2.4.4 Caricamento Arbitrario di File Non Autenticato fino a RCE Panoramica...

9.8CVSS8.8AI score0.27701EPSS
SaveExploits9
NVD
NVD
added 2026/08/27 6:17 a.m.10 views

CVE-2026-77018

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

8.8CVSS0.00406EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 6:17 a.m.9 views

CVE-2026-77017

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...

7.7CVSS0.00249EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 6:05 a.m.5 views

Ni8mare

🔒 Ni8mare Scanner Ethischer Sicherheitsscanner für CVE-2026-21858 Ni8mare-Schwachstelle „Wissen ist Macht, aber nur, wenn es verantwortungsvoll geteilt wird." Umfassendes Schwachstellenerkennungstool für n8n-Workflow-Automatisierungsinstanzen. Erkennt die kritische Schwachstelle CVE-2026-21858 CV...

10CVSS9AI score0.78197EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/08/27 6:03 a.m.3 views

CVE-2026-34036

CVE-2026-34036 Script proof-of-concept per CVE-2026-34036 , una inclusione locale di file / LFI autenticata in Dolibarr. Il problema è raggiungibile tramite core/ajax/selectobject.php. Un utente autenticato può abusare del parametro objectdesc per far sì che l'applicazione legga file locali...

6.5CVSS5.2AI score0.01464EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/27 6:03 a.m.3 views

CVE-2024-23897-Jenkins-4.441

CVE-2024-23897 - Jenkins Lettura Arbitraria di File Compilazione root@kitploit: g++ CVE-2024-23897.cpp -o exploit Utilizzo root@kitploit: /exploit -u http://10.10.10.10 -f /etc/passwd...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits50
Cvelist
Cvelist
added 2026/08/27 6:00 a.m.27 views

CVE-2026-77017 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...

0.00249EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 6:00 a.m.9 views

EUVD-2026-66879

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...

7.7CVSS5.6AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 6:00 a.m.16 views

CVE-2026-77017

CVE-2026-77017 affects the Workeera Remote Tech Job Board WordPress plugin in versions prior to 1.0.6 . The root cause is a mass assignment flaw in the candidate profile feature: the plugin does not restrict which profile values a candidate may submit, nor does it confine the stored file location...

7.7CVSS5.7AI score0.00249EPSS
SaveExploits0References1
Rows per page
Query Builder