49129 matches found
CVE-2026-33725
CVE-2026-33725 Una proof-of-concept per CVE-2026-33725, una Remote Code Execution e Arbitrary File Read tramite H2 JDBC INIT Injection nell'importazione di serializzazione EE in Metabase. Versioni Vulnerabili Metabase Enterprise ≥ v1.47 e v1.54.22 Metabase Enterprise ≥ v1.54.0 e v1.54.22 Metabase...
EUVD-2026-66379
Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...
CVE-2026-3844
CVE-2026-3844 — Breeze Cache = 2.4.4 Caricamento Arbitrario di File Non Autenticato fino a RCE Panoramica...
CVE-2026-77018
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...
CVE-2026-77017
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...
Ni8mare
🔒 Ni8mare Scanner Ethischer Sicherheitsscanner für CVE-2026-21858 Ni8mare-Schwachstelle „Wissen ist Macht, aber nur, wenn es verantwortungsvoll geteilt wird." Umfassendes Schwachstellenerkennungstool für n8n-Workflow-Automatisierungsinstanzen. Erkennt die kritische Schwachstelle CVE-2026-21858 CV...
CVE-2026-34036
CVE-2026-34036 Script proof-of-concept per CVE-2026-34036 , una inclusione locale di file / LFI autenticata in Dolibarr. Il problema è raggiungibile tramite core/ajax/selectobject.php. Un utente autenticato può abusare del parametro objectdesc per far sì che l'applicazione legga file locali...
CVE-2024-23897-Jenkins-4.441
CVE-2024-23897 - Jenkins Lettura Arbitraria di File Compilazione root@kitploit: g++ CVE-2024-23897.cpp -o exploit Utilizzo root@kitploit: /exploit -u http://10.10.10.10 -f /etc/passwd...
CVE-2026-77017 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...
EUVD-2026-66879
The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...
CVE-2026-77017
CVE-2026-77017 affects the Workeera Remote Tech Job Board WordPress plugin in versions prior to 1.0.6 . The root cause is a mass assignment flaw in the candidate profile feature: the plugin does not restrict which profile values a candidate may submit, nor does it confine the stored file location...
Weblate-CVE-2026-24126
Weblate — Lettura Arbitraria di File tramite Iniezione di Argomenti Host SSH Scoperto da: Alejandro Baño · Gennaio 2026 Riconosciuto da: Note di rilascio Weblate 5.16 Panoramica L'endpoint di gestione delle chiavi host SSH di Weblate passa il parametro host fornito da un amministratore autenticat...
CVE-2021-41277
CVE-2021-41277 MetaBase Vulnerabilidade de leitura arbitrária de arquivos - poc em lote para fofa Declaração Este poc destina-se apenas à detecção da existência da vulnerabilidade no alvo. É estritamente proibido utilizá-lo para testes não autorizados. O autor não assume qualquer responsabilidade...
CVE-2024-11613-wp-file-upload
CVE-2024-11613-wp-file-upload Exploit di Chirag Artani https://3rag.com per CVE-2024-11613 nel plugin WordPress File Upload Ecco le informazioni - Il plugin WordPress File Upload per WordPress è vulnerabile a Remote Code Execution, Arbitrary File Read e Arbitrary File Deletion in tutte le version...
zimaos-cve-2026-28286-arbitrary-file-write
🚨 CVE-2026-28286 — ZimaOS Scrittura Arbitraria di File Da Configurazione API Errata → Scrittura Arbitraria di File → Potenziale Compromissione del Sistema ⚡ TL;DR Endpoint: /v21/files/file Problema: Nessuna validazione del percorso Impatto: Scrittura arbitraria di file al di fuori della directory...
CVE-2026-34070
Ho Trovato un Bug di Path Traversal in LangChain Che Potrebbe Far Trapelare le Tue Credenziali Cloud Come un'API legacy dimenticata in uno dei framework AI più popolari ha esposto silenziosamente milioni di applicazioni a letture arbitrarie di file. C'è una certa sensazione che provi quando una...
PageMyadmin_file_upload_getshell
Ce depot n’a pas de fichier README...
CVE-2026-30952-PoC
CVE-2026-30952: PoC di Path Traversal in LiquidJS Questo repository contiene una Proof of Concept PoC per CVE-2026-30952 , una vulnerabilità di path traversal ad alta gravità scoperta nella libreria liquidjs versioni 10.25.0. Autori e Ricercatori: Moriel Harush Maor Caplan Descrizione La...
CVE-2025-52691
CVE-2025-52691 SmarterMail: неаутентифицированная произвольная загрузка файлов RCE Обзор Критическая уязвимость неаутентифицированной произвольной загрузки файлов, позволяющая удалённо выполнять код...