CLEANSTART-2026-LP18799 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened

CVE-2025-61728 affects multiple packages. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. See references for individual vulnerability details...

CVE-2026-62121 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows PHP Local File Inclusion.This issue affects Unlimited...

CVE-2026-62121 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows PHP Local File Inclusion.This issue affects Unlimited...

EUVD-2026-114269

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows PHP Local File Inclusion.This issue affects Unlimited...

CVE-2026-62121

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin (versions up to and including 2.0.26 ) is vulnerable to a Local File Inclusion (LFI) vulnerability. The root cause is the Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98), whi...

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Siyang Wu in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.26...

CVE-2026-119117 Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117 Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117

The Amazon Kinesis Producer Library for Java (versions prior to 1.0.8 ) is vulnerable to the insertion of sensitive information. When the library's logger is set to DEBUG level, it may write resolved AWS credentials into log files. Additionally, the library passes these credentials as command-lin...

CVE-2025-31486-Simulation

Vite Path Traversal Lab CVE-2025-31486 A hands-on, containerized lab environment to simulate and exploit the Path Traversal vulnerability in Vite's development server, identified as CVE-2025-31486. 📖 About The Vulnerability This lab demonstrates a significant Path Traversal vulnerability found in...

CLEANSTART-2026-JS67826 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content

CVE-2025-61731 affects multiple packages. Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. See references for individual vulnerability details...

php2shell-pmb-poc

php2shell → PMB: unauthenticated RCE chain Authorized penet...

CVE-2026-119722

A flaw was found in Blender. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted project file. Because the application fails to properly validate structure sizes during file parsing, memory...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

CVE-2023-2825-Gitlab

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It wa...

EUVD-2026-114249

LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository...

CVE-2020-29607

Alienfader Exploit / Alien@shell Webshell Upload Exploit Description: This Python script exploits a file upload restriction bypass vulnerability in Pluck CMS e.g., versions prior to 4.7.13 to upload a PHP webshell. Once uploaded, the shell named "shell.phar" can be used to execute commands on the...

cve-2026-80428-ctf

CVE-2026-80428 CTF Training Lab Educational emulator of the vulnerability mechanics described in CVE-2026-80428 CWE-502: Deserialization of Untrusted Data. This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students,...

CVE-2017-4490-

CVE-2017-4490 I've done some experiments I have succeeded in Exploit file .basgrc Specialist on Writing and decorating on Terminal I have created Weakness in file .bashrc And succeeded in Impede Terminal The weakness exists with me Works on all systems Linux Because figlet Works on all systems Ju...