GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

podman: Arbitrary file write when importing OCI archive

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

CVE-2026-96774

A vulnerability exists in the SPON Communications IP Network Audio Device XC-9603 (version 1.2.3_20181106 Build 107). The flaw impacts the loadCfg function within the /ini/sys_cfg.txt file of the Configuration File Download component. This issue allows for information disclosure via a remote atta...

EUVD-2026-85706

Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbiddenextensions blocklist in config/mediable.php. The blocklist introduced to address CVE-2026-49972 includes phpt but omits pht, which Apache executes as PHP via...

EUVD-2026-85705

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via accessible file mounts...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN Lectura de archivos antes de autenticación Referencia 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

AttackTomcat

AttackTomcat Vulnerability Detection List CVE-2017-12615 PUT file upload vulnerability tomcat-pass-getshell weak authentication deployment war package Weak password brute force CVE-2020-1938 Tomcat file read/inclusion Usage Before first use, please reset the configuration file in settings. For...

CVE-2023-41717

CVE-2023-41717 Control inadecuado de tipos de archivo en Zscaler Proxy versiones 3.6.1.25 y anteriores permite a atacantes locales eludir las restricciones de descarga/carga de archivos. Resumen Ejecutivo Durante el verano de 2022, encontré una vulnerabilidad que afecta al proxy ZScaler versiones...

onionshare

OnionShare OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Installing OnionShare You can download OnionShare for Windows and macOS from the OnionShare website. For macOS you can also use Homebrew:...

PhantomFS

假文件。真安全。 为Windows打造的虚拟蜜罐文件系统——引诱攻击者进入看似真实的目录，然后当场捕获他们。 什么是 PhantomFS？ PhantomFS 利用 Windows 投影文件系统（ProjFS） 呈现一个充满逼真假文件的虚拟目录——这些文件（财务报表、SSH 密钥、API 凭据、HR 电子表格、保密协议等）仅存在于内存中。在攻击者（或内部威胁）打开文件之前，不会有任何数据写入磁盘。 一旦文件被触碰，PhantomFS 将： 写入一条 Windows 事件日志 条目（应用程序日志，源为 PhantomFS） 向当前桌面会话发送一条 Toast 通知...

CVE-2023-26360

Uso Usage: python3 script.py endpoint proxyurl Lectura de archivos...

CVE-2024-22532

CVE-2024-22532 Descripción XnSoft XnView Classic 2.51.5 y NConvert 7.163 son vulnerables a un desbordamiento de búfer basado en montón Heap-based Buffer Overflow mediante un archivo .xwd manipulado Vendor XnSoft Productos afectados XnView Classic 2.51.5 NConvert 7.163 Impacto Denegación de servic...

fsmon

fsmon 适用于 Linux、Android、iOS 和 macOS 的底层文件系统监控工具。 作者 ：pancake @ nowsecure 许可证 ：MIT 设计目标用户： 系统管理员和事件响应人员 安全研究人员和取证分析师 调试 I/O 密集型应用的开发人员 对观察文件系统访问行为感兴趣的逆向工程师 安装 在 macOS 上，现在可以通过 brew 安装，命令如下： root@kitploit: brew tap nowsecure/fsmon https://github.com/nowsecure/fsmon brew install nowsecure/fsmon/fsmo...

CVE-2016-5195

CVE-2016-5195 my personal POC and EXPLOIT of CVE-2016-5195 dirty COW Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: root@kitploit: $ gcc poc.c -o poc -static -lpthread You shall run it as follow: root@kitploit: ./poc destinationfile fakefile Yo...