CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - PeopleSoft LFI Exploit Unauthenticated Local File Inclusion LFI in Oracle PeopleSoft Enterprise PeopleTools 👨‍💻 Author 0xTerror Security Researcher | Exploit Developer 📋 Description CVE-2023-22047 is a critical unauthenticated Local File Inclusion LFI vulnerability discovered in...

Myesve

myesve CVE-2024-38475 Exploitation Framework – Version 1.0 Disclaimer: This tool is intended for authorized security testing, educational research, and legitimate bug bounty programs only. Do not use it against systems you do not own or lack explicit permission to test. The authors assume no...

CVE-2026-25732-NiceGUI-3.6.1

Author: Mohammed Idrees Banyamer Contact: Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE-2026-25732 — NiceGUI Path Traversal in FileUpload → Arbitrary File Write Exploit Title: NiceGUI Path Traversal in FileUpload Leading to Arbitrary File Write Date: 2025-06-06 Tested on:...

CVE-2026-34070

I Found a Path Traversal Bug in LangChain That Could Leak Your Cloud Credentials How a forgotten legacy API in one of AI's most popular frameworks quietly exposed millions of applications to arbitrary file reads. There's a certain feeling you get when a proof-of-concept works on the first try. No...

POC-CVE-2026-19681

CVE-2026-19681 — command injection in file upload processing authenticated Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. Staged filename p;sleep$IFS20;-EvvfJk via POST /rest/file/upload context prefix carries the metachars, then POST /rest/auditFile type=scapLinux, version=1.2 stalled exact...

CVE-2026-103978

CVE-2026-103978 - Unauthenticated path traversal in OPNMGR Arbitrary .json file read, no login needed. Found this while reading through the source of agit8or1/OPNMGR, an OPNsense fleet manager written in PHP. | ---|--- CVE| CVE-2026-103978 Advisory| GHSA-8x7v-vwpx-3wr7 Class| CWE-22 Path Traversa...

2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

CVE-2024-49653

📜 WordPress Portfolleo Plugin Exploit CVE-2024-49653 🚨 Vulnerability Details Title: WordPress Portfolleo plugin = 1.2 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in James Eggers Portfolleo portfolleo allows uploading a web shell...

pfsense-dyndns-cache-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-dyndns-cache-path pfsense-dyndns-cache-path Class: File write Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Custom host skips isdomain. updatedns builds the cache path as /conf/dyndnsiftype...

CVE-2026-22812-POC

OpenCode CVE-2026-22812 Exploiter Simple Python tols to check and exploit OpenCode vulnerability CVE-2026-22812. Install git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse concurrent-log-handler colorama Basic Usage Check...

CVE-2026-4350

CVE-2026-4350 - Perfmatters WordPress Arbitrary File Deletion Description CVE-2026-4350 is an arbitrary file deletion vulnerability in the Perfmatters WordPress plugin. CVE Details CVE: CVE-2026-4350 Severity: HIGH CVSS: 8.1 Affected Plugin: Perfmatters Affected Version: = 2.5.9.1 Exploit python3...

cve_2023_38831_scanner

CVE-2023-38831 Scanner Overview The CVE-2023-38831 Scanner is an advanced cybersecurity tool designed to detect and analyze the presence of the CVE-2023-38831 vulnerability in WinRAR installations. This project implements a multi-layered approach to vulnerability detection, incorporating file...

CVE-2025-25968

CVE-2025-25968: Improper Access Control vulnerability in DDSN Interactive cm3 Acora CMS version 10.1.1 DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator...

oopso

oopso An easy-to-use client-side OSINT query builder for discovering exposed file managers across search engines. Version: 1.0 Features Multi-engine support: Automatically translates fingerprints into native query syntax for Shodan, FOFA, ZoomEye, and Censys Extensive coverage: Built-in signature...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Python 3 checker and configurable exploit hook for CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Product| REDCap Vanderbilt Affected| ≥ 13.3.0 until branch patch Fixed| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical...

CVE-2026-60093

CVE-2026-60093 — camel-azure-storage-datalake downloadToFile path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-datalak...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Root Cause Analysis Lab Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal through the file upload functionality in Struts 2. Source This lab...

CVE-2026-110176

The File Force Download module for Drupal 7 implements hookfiledownload to add a Content-Disposition header when a file URL carries the download query parameter. In Drupal 7, returning a non-empty header array from that hook is itself a grant of access to the file. In versions 7.1.0 through 7.1.2...

cve-2022-44268

CVE-2022-44268 ImageMagick is a free and open-source cross-platform software suite for displaying, converting, and editing raster image and vector image files. It can read and write over 200 image file formats. ImageMagick is licensed under the Apache License 2.0. It is available in the form of...

CVE-2026-34990

CVE-2026-34990 Description CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on...