CVE-2026-62129 WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability

Contributor Arbitrary File Upload in Creator LMS = 1.2.21 versions...

CVE-2026-62129

The Creator LMS WordPress plugin (versions

EUVD-2026-96511

Contributor Arbitrary File Upload in Creator LMS = 1.2.21 versions...

EUVD-2026-96462

Subscriber Arbitrary File Upload in CodeBard Help Desk = 1.1.2 versions...

CVE-2026-62025 WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...

CVE-2026-62024 WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in CodeBard Help Desk = 1.1.2 versions...

CVE-2026-62024

The CodeBard Help Desk WordPress plugin, versions

CVE-2026-62025

The Tailored Tools plugin for WordPress (versions

EUVD-2026-96463

Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...

CVE-2026-40805

The PeepSo WordPress plugin (versions

CVE-2026-40805 WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability

Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...

EUVD-2026-96541

Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...

CVE-2026-108597

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal tar slip vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to...

CVE-2026-108597 Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal tar slip vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to...

CVE-2026-108597

The Cohere Python SDK versions 5.11.0 through 7.2.0 are vulnerable to a path traversal (tar slip) vulnerability within the _s3_models_dir_to_tarfile function. The root cause is the use of unvalidated tarfile.extractall() calls, which allows an attacker who can write model archives to the victim's...

EUVD-2026-96395

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal tar slip vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to...

CVE-2026-108597

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal tar slip vulnerability in s3modelsdirtotarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to...

disclosure-thinkware-u3000

Thinkware U3000 Dashcam: Vulnerabilità di Sicurezza Tre vulnerabilità nel protocollo di controllo WiFi locale della dashcam Thinkware U3000, scoperte tramite reverse engineering dell'app Android ufficiale e confermate su hardware reale. Tutte e tre richiedono solo l'accesso alla rete locale: ness...

CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2025-14611 CentreStack and Triofox full Poc/Exploit Summary This vulnerability arises from hardcoded cryptographic keys in Gladinet CentreStack and Triofox products, enabling arbitrary file read through forged access tickets. The AES-256 encryption implementation uses static, unchanging keys...

pipe-primitive

pipe-primitive An exploit primitive in linux kernel inspired by DirtyPipe CVE-2022-0847. Alcuni giorni fa, come molti esperti di sicurezza prima di me, ho studiato e riprodotto la vulnerabilità DirtyPipe CVE-2022-0847, rendendomi profondamente conto di quanto sia utile. La falla nasce da un...