CLEANSTART-2024-XG79226 When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution

Security vulnerability affects the librewolf package. When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution...

CLEANSTART-2023-IE09036 arbitrary file write vulnerability was found in GNU gzip's zgrep utility

Security vulnerability affects the gzip package. An arbitrary file write vulnerability was found in GNU gzip's zgrep utility...

xz-backdoor-scan

Scan for files containing the signature from the xz backdoor CVE-2024-3094. Rapidly scans files and reports back with any files found to contain the signature used in the backdoor. WARNING: Do not trust this program to be correct or alert you about the presence of a backdoor. This is a proof of...

CLEANSTART-2023-WU21841 file disclosure and inclusion vulnerability exists in web/views/file

Security vulnerability affects the zoneminder package. A file disclosure and inclusion vulnerability exists in web/views/file...

CLEANSTART-2024-UX61985 Improper Check for filenames with overly long extensions in PostMaster (sending in email) or uploading files (e

Security vulnerability affects the otrs package. Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e...

CLEANSTART-2024-XF43312 If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with a...

CVE-2020-35112 affects multiple packages. If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as. See references for...

CVE-2025-6218-WinRAR-Directory-Traversal-RCE

CVE-2025-6218-WinRAR-Directory-Traversal-RCE CVE-2025-6218 is a directory traversal vulnerability in WinRAR that allows an attacker to place files outside the intended extraction directory when a user extracts a specially crafted .rar archive. By exploiting this flaw, an attacker can drop malicio...

CLEANSTART-2024-RO16736 ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory

Security vulnerability affects the librewolf package. An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory...

CLEANSTART-2024-VY78190 When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins

Security vulnerability affects the librewolf package. When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins...

CVE-2026-78191

WebDyne versions from 2.031 before 3.022 for Perl execute files with .psp anywhere in the name as Perl pages. WebDyne decides whether to run a requested file as a page by matching its name against WEBDYNEPSPEXTRE, which has no end anchor. An application that accepts uploads by checking only the...

scalpel

As of 6/27/2013 Scalpel has been released under the Apache 2.0 License and the source is available at The Sleuth Kit github repository. It is not being actively maintained. The Autopsy team started to do work on it to integrate tightly into via Java/JNI bindings, but ran into several memory leaks...

CLEANSTART-2024-DG60790 Windows Common Log File System Driver Denial of Service Vulnerability

CVE-2022-22710 affects multiple packages. Windows Common Log File System Driver Denial of Service Vulnerability See references for individual vulnerability details...

CVE-2023-4698

CVE-2023-4698 Local File Inclusion LFI in usememos/memos 0.13.2 Description Today, I want to shine a spotlight on a significant discovery — a critical security vulnerability that has been identified in usememos/memos. This vulnerability, which falls under the category of Local File Inclusion LFI,...

CVE-2023-38831-POC

CVE-2023-38831-POC Proof-of-concept of CVE-2023-38831 Note: The "GTA Leak" file isn't real. It's just zeros without ones "What should i click? The folder or the file?"...

CVE-2026-67185-Unauthenticated-Path-Traversal-Allows-Arbitrary-File-Read-TinyWeb-

Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read TinyWeb Assigned CVE ID: CVE-2026-67185 Summary TinyWeb builds the path of the file to serve by joining the web root with the request URL exactly as it arrives, with no normalization. A remote client that has never...

CVE-2024-23897

CVE-2024-23897 Jenkins Arbitrary File Leak Vulnerability CVE-2024-23897 !CAUTION ⚠️ Disclaimer: IMPORTANT: This script is provided for educational, ethical testing, and lawful use ONLY. Do not use it on any system or network without explicit permission. Unauthorized access to computer systems and...

CVE-2025-66039_CVE-2025-61675_CVE-2025-61678_reePBX

FreePBX CVE-2025 Vulnerability Scanner ⚠️ DISCLAIMER FOR EDUCATIONAL AND AUTHORIZED TESTING ONLY This tool is provided "AS IS" for educational and research purposes only Authors are NOT responsible for any misuse or illegal activities Unauthorized access to computer systems is ILLEGAL Only use on...

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel Proof of concept for CVE-2020-11819 and CVE-2020-15946. Tested on Rukovoditel 2.4.x, 2.5.x and 2.6.1 Description: This exploit has two modes of execution, using the session fixation vulnerability CVE-2020-15946 or using the access credentials of any account under any profile...

Ashwesker-CVE-2025-52691

🚨 CVE-2025-52691 — Critical SmarterMail Vulnerability Status: 🔥 Critical — Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29–30, 2025 🧩 Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...

CVE-2025-31131

CVE-2025-31131 - YesWiki 4.5.2 Path Traversal Exploit This is an unauthenticated path traversal exploit targeting YesWiki versions prior to 4.5.2. The vulnerability exists in the squelette parameter, which allows reading arbitrary files from the server. Vulnerability Details CVE-ID: CVE-2025-3113...