WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Siyang Wu in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.26...

CVE-2026-119117 Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117 Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might allow local users to obtain the AWS credentials that the library resolved for the application. Separately, affected versio...

CVE-2026-119117

The Amazon Kinesis Producer Library for Java (versions prior to 1.0.8 ) is vulnerable to the insertion of sensitive information. When the library's logger is set to DEBUG level, it may write resolved AWS credentials into log files. Additionally, the library passes these credentials as command-lin...

CVE-2025-31486-Simulation

Vite Path Traversal Lab CVE-2025-31486 A hands-on, containerized lab environment to simulate and exploit the Path Traversal vulnerability in Vite's development server, identified as CVE-2025-31486. 📖 About The Vulnerability This lab demonstrates a significant Path Traversal vulnerability found in...

CLEANSTART-2026-JS67826 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content

CVE-2025-61731 affects multiple packages. Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. See references for individual vulnerability details...

php2shell-pmb-poc

php2shell → PMB: unauthenticated RCE chain Authorized penet...

CVE-2026-119722

A flaw was found in Blender. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted project file. Because the application fails to properly validate structure sizes during file parsing, memory...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

CVE-2023-2825-Gitlab

CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It wa...

EUVD-2026-114249

LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers can trick users into downloading a crafted model repository...

CVE-2020-29607

Alienfader Exploit / Alien@shell Webshell Upload Exploit Description: This Python script exploits a file upload restriction bypass vulnerability in Pluck CMS e.g., versions prior to 4.7.13 to upload a PHP webshell. Once uploaded, the shell named "shell.phar" can be used to execute commands on the...

cve-2026-80428-ctf

CVE-2026-80428 CTF Training Lab Educational emulator of the vulnerability mechanics described in CVE-2026-80428 CWE-502: Deserialization of Untrusted Data. This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students,...

CVE-2017-4490-

CVE-2017-4490 I've done some experiments I have succeeded in Exploit file .basgrc Specialist on Writing and decorating on Terminal I have created Weakness in file .bashrc And succeeded in Impede Terminal The weakness exists with me Works on all systems Linux Because figlet Works on all systems Ju...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. usage:...

CLEANSTART-2026-HF77036 "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp")

CVE-2026-39819 affects multiple packages. The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". See references for individual vulnerability details...

CVE-2021-36749

CVE-2021-36749 Apache Druid LoadData Arbitrary File Read Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized attacks on websites are prohibited. Online reading of...

CLEANSTART-2026-EO65959 Parsing a malicious font file can cause excessive memory allocation

CVE-2026-33812 affects multiple packages. Parsing a malicious font file can cause excessive memory allocation. See references for individual vulnerability details...