491452 matches found
CVE-2026-90817
CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Python 3 checker and configurable exploit hook for CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Product| REDCap Vanderbilt Affected| ≥ 13.3.0 until branch patch Fixed| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical...
CLEANSTART-2024-KW08728 newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as
Security vulnerability affects the firefox-esr package. A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as...
CVE-2022-4140
CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...
CVE-2023-20052
CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...
CVE-2009-2265-fix
CVE-2009-2265 - Adobe ColdFusion RCE Unauthenticated remote code execution via arbitrary file upload in the FCKeditor component bundled with ColdFusion. The file upload endpoint accepts a null-byte injection in the filename parameter, allowing a JSP webshell to be uploaded and executed directly b...
CLEANSTART-2024-TP27104 executable file warning was not presented when downloading
CVE-2023-5727 affects multiple packages. The executable file warning was not presented when downloading. See references for individual vulnerability details...
CVE-2025-26319
CVE-2025-26319 1. Basic File Upload python flowiseexploit.py -u http://target:3000 -f localfile.txt -d /path/on/server/file.txt 2. Upload Configuration File Modify API key configuration python flowiseexploit.py -u http://target:3000 -f newapi.json -d /root/.flowise/api.json 3. Auto-generate and...
CVE-2026-115604
The WordPress SureDash plugin (versions
CVE-2026-115604 WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in SureDash = 1.12.3 versions...
CVE-2026-115604 WordPress SureDash plugin <= 1.12.3 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in SureDash = 1.12.3 versions...
EUVD-2026-114301
Subscriber Arbitrary File Deletion in SureDash = 1.12.3 versions...
CVE-2026-67401
CVE-2026-67401 SQL injection in cPanel EmailTrack. Authenticated cPanel user with mail privileges writes arbitrary files as root via SQLite ATTACH DATABASE. One request to root. Haven't tested on a real target, code is only put together from public information and basic diff'ing. Do your due...
PoC-for-CVE-2020-28948-CVE-2020-28949
POC for CVE-2020-28948 & CVE-2020-28949 The files here contain PoC for CVE-2020-28948 & CVE-2020-28949 to achieve remote exploit The server The server folder contains a simple upload server which uses the vulnerable ArchiveTar library, located in server/Archive. The server accepts a Tar archive...
CLEANSTART-2024-SZ97187 GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability
Security vulnerability affects the gimp package. GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability...
CLEANSTART-2024-IP30957 GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability
Security vulnerability affects the gimp package. GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability...
CLEANSTART-2024-GC14102 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Security vulnerability affects the gimp package. GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...
CLEANSTART-2024-HD72386 GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Security vulnerability affects the gimp package. GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...
DEBIAN-CVE-2026-84243
The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...
CLEANSTART-2024-GW64196 Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP...
Security vulnerability affects the drupal7 package. Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations...
CVE-2026-76012
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...