CVE-2026-118043: Unknown Bulk Media Register: The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a…

The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, allowing users with the Author role to move or rename arbitrary files, including outside the WordPress root, which can defeat directory-level access controls an...

Fedora 45 : openbao (2026-c0f7a19ee3)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c0f7a19ee3 advisory. Update to upstream 2.6.4. Includes multiple GHSA security notices, see https://github.com/openbao/openbao/releases/tag/v2.6.4 ---- Update to 2.6.3-2. Fixes...

Linux Distros Unpatched Vulnerability : CVE-2026-107347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log writes that may allow a malicious workload to...

Linux Distros Unpatched Vulnerability : CVE-2026-119147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the modsftp copy-file extension handler that skips Limit WRITE checks for new destinatio...

Linux Distros Unpatched Vulnerability : CVE-2026-119722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in readstruct that skips size validation when a .blend file's SDNA...

PT-2026-134477

Name of the Vulnerable Software and Affected Versions Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning versions prior to 22.3.3 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting...

Cacti 1.2.28 Authenticated Arbitrary File Creation / Remote Code Execution

Cacti version 1.2.28 and prior contain an authenticated arbitrary file creation vulnerability in graph template handling that can lead to remote code execution. This proof of concept writes and triggers a PHP payload through crafted rrdtool graph options. https://packetstorm.news/download/238686...

Gogs 0.13.3 Symlink Arbitrary File Write

Gogs version 0.13.3 and prior contain a symlink handling flaw in the PutContents API that allows an authenticated user to overwrite files writable by the Gogs process. The supplied proof of concept demonstrates the issue. https://packetstorm.news/download/238685...

Security update for cifs-utils (important)

openSUSE security update: security update for cifs-utils ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22170-1 Rating: important References: bsc1284932 Cross-References: CVE-2026-104715 CVSS scores: CVE-2026-104715 SUSE : 7.8...

Filament 5.6.4 Unauthenticated Temporary File Upload

Filament versions 3.0.0 through 3.3.51, 4.0.0 through 4.11.4, and 5.0.0 through 5.6.4 contain an unauthenticated temporary-file upload issue on authentication pages. The proof of concept uploads test files and checks retrieval paths. https://packetstorm.news/download/238694...

CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

forgejo-restore-file-open

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · forgejo-restore-file-open Write-up: https://abraxaslabs.tech/research/forgejo-restore-file-open forgejo-restore-file-open Class: File read Reach: Local Forgejo 16.0.5 8d24b7d - Forgejo forgejo restore-repo of an...

CVE-2023-26255-6

Jira plugin STAGIL Navigation FileName Parameter Arbitrary File Read Vulnerability POC Script Usage as follows: Single URL Detection 1. Use the command line to detect a single URL, pass the URL parameter with -U 2. Observe the returned result; if it shows "is vulnerable!", then the vulnerability...

CVE-2024-3400

CVE-2024-3400 Simple Python code to check for arbitrary uploading to a PaloAlto Simply checks for status codes returned from the paloalto before and after file creation. This creates a randomly generated filename and attempts to call it back after post. This will save a file to your PaloAlto if...

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composer’s Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...

lighttpd-win32-dotdot-space

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · lighttpd-win32-dotdot-space Write-up: https://abraxaslabs.tech/research/lighttpd-win32-dotdot-space lighttpd-win32-dotdot-space Class: File read Reach: Remote lighttpd 1.4.85 4852959 - lighttpd Native WIN32 staticfile...

CVE-2021-44228_scanner-main-Modified-

CVE-2021-44228scanner modified - Deprecated Original Script and Repo: https://github.com/CERTCC/CVE-2021-44228scanner Modified by: Alex Pena Applications that are vulnerable to the log4j CVE-2021-44228 issue may be detectable by scanning jar, war, and ear files to search for the presence of...

CVE-2024-31835

CVE-2024-31835 Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a craftedpayload to the file name parameter. Affected Component: FlatPress CMS Admin Panel File Upload Field Fixed version: Flatpress v1.3 - will be fixed in...

CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version

CVE-2023-4596 PoC Script for CVE-2023-4596, An efficient Python tool created to perform unauthenticated Remote Command Execution via arbitrary file uploads. Resources Installation Usage Usage Installation git clone https://github.com/X-Projetion/CVE-2023-4596-Vulnerable-Exploit-and-Checker-Versio...

CVE-2024-3400-Palo-Alto-OS-Command-Injection

Steps : 1. Check whether file 0xr2r.txt is present on device by running below get request or We can verify same by openinig https://domain.com/global-protect/portal/images/0xr2r.txt Url in browser if you get 404 response that means file is not present. POST /ssl-vpn/hipreport.esp HTTP/1.1 Host:...