BitLeak

BitLeak BitLeak is a Python tool that check and display torrent downloads linked to a given IP address. git clone https://github.com/AnkhCorp/BitLeak.git pip3 install -r requirements.txt python bitleak.py...

CVE-2026-118018

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159...

CVE-2026-118018

Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159...

axios-ssrf

Get Started run pnpm install on the root, backend, and frontend directories run pnpm start:dev on the root directory Vulnerabilities This website is published on: https://axios-ssrf.onrender.com/ Server Side Request Forgery: I specifically used a version of axios that is vulnerable to SSRF attack...

filessh

FileSSH A TUI-based file explorer for SSH servers, which allows you to browse and manage files on a remote server, edit them in-place, and recursively download directories with parallel directory traversal. It also has the ability to quickly spawn SSH sessions to paths on the remote server...

WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12. id: CVE-2024-5057 info: name: WordPress Easy Digital Downloads = 3.2.12 - SQL Injecti...

Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download

Longjing Technology BEMS API 1.21 is vulnerable to local file inclusion. Input passed through the fileName parameter through the downloads API endpoint is not properly verified before being used to download files. This can be exploited to disclose the contents of arbitrary and sensitive files...

Easy Digital Downloads - Privilege Escalation

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1. id: CVE-2023-30869 info: name: Easy Digital Downloads - Privilege Escalation author: daffainfo severity: critical...

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

CVE-2026-116403

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Downloads: from n/a through 3.7.1...

EUVD-2026-109986

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Downloads: from n/a through 3.7.1...

CVE-2026-116403 WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Downloads: from n/a through 3.7.1...

CVE-2026-116403

The Awesomemotive Easy Digital Downloads WordPress plugin (versions through 3.7.1 ) is susceptible to a Race Condition vulnerability (CWE-362). This issue stems from Concurrent Execution using Shared Resource with Improper Synchronization , which allows an attacker to leverage race conditions to ...

WordPress Easy Digital Downloads plugin <= 3.7.1 - Race Condition vulnerability

Race Condition vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Digital Downloads versions = 3.7.1...

Z-Downloads < 1.11.7 - Cross-Site Scripting

The plugin does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript. id: CVE-2024-8673 info: name: Z-Downloads 1.11.7 - Cross-Site Scripting author: Splint3r7 severity: low description: | The plugin does not properly validate uploaded files...

WordPress Candidate Application Form <= 1.3 - Local File Inclusion

WordPress Candidate Application Form = 1.3 is susceptible to arbitrary file downloads because the code in downloadpdffile.php does not do any sanity checks. id: CVE-2015-1000005 info: name: WordPress Candidate Application Form = 1.3 - Local File Inclusion author: dhiyaneshDK severity: high...

WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection

WordPress Easy Digital Downloads plugin 3.1.0.2 and 3.1.0.3 contains a SQL injection vulnerability in the s parameter of its edddownloadsearch action. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...

CVE-2026-86018 Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attachment file size when using the server-side “Download external file” attachment feature. When server-side attachment...

CVE-2026-86018

The Part-DB inventory management system for electronic components is vulnerable to disk exhaustion in versions prior to 2.13.2 . The root cause is the "Download external file" attachment feature, which allows authenticated users to bypass the MAX_ATTACHMENT_FILE_SIZE limit. When server-side attac...

CVE-2026-86018 Part-DB: Authenticated Disk Exhaustion via Unbounded Server-Side Attachment Downloads

Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attachment file size when using the server-side “Download external file” attachment feature. When server-side attachment...