WordPress Breeze Cache plugin < 2.5.13 - Unauthenticated Limited File Creation vulnerability

Unauthenticated Limited File Creation vulnerability discovered by Jakub Herman in WordPress Plugin Breeze versions 2.5.13...

CVE-2026-79706 Breeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

EUVD-2026-67573

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...

CVE-2026-79706

CVE-2026-79706 affects the Breeze Cache WordPress plugin in versions prior to 2.5.13 . The root cause is an unsanitised request value used to construct cache file paths, enabling unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory. ...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

CVE-2026-54083 Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

CVE-2026-54083

Wazuh is an open-source security platform (XDR/SIEM). The ip-customblock active response script contains a path traversal vulnerability: it concatenates the srcip field from alert JSON directly onto the /ipblock/ base directory without validating that the value is a well-formed IP address. Unlike...

CVE-2026-54083 Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. The ip-customblock active response script contains a path traversal vulnerability that lets an attacker create or delete arbitrary files on the filesystem as root. The script...

CVE-2024-3400

CVE-2024-3400 Descrizione Una vulnerabilità di iniezione di comandi, derivante da una debolezza di creazione arbitraria di file nella funzionalità GlobalProtect del software PAN-OS di Palo Alto Networks, per specifiche versioni di PAN-OS e distinte configurazioni di funzionalità, può consentire a...

CVE-2026-20253

CVE-2026-20253 — Laboratorio di RCE pre-autenticazione su Splunk Enterprise Creazione e Troncatura Arbitraria di File non Autenticata tramite Sidecar PostgreSQL CVSS 9.8 · Critico · CWE-306 · Sfruttato attivamente CISA KEV ⚠️ Disclaimer Questo repository è inteso strettamente per scopi educativi e...

CVE-2026-76222

A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule...

log4shell-poc-lab

Log4Shell POC Demo Questo repository contiene un sottomodulo, clonalo con: root@kitploit: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Per avviare la demo, esegui: root@kitploit: docker compose up Per vedere l'exploit creare un file sul server vittima,...

CVE-2014-5284

CVE-2014-5284 Implementazione Bash di CVE-2014-5284 Titolo Exploit: ossec 2.8 Vulnerabilità di Creazione di File Temporanei Non Sicuri - Privilege Escalation Python è carino ma non funziona sempre Autore Exploit: mbadanoiu Autore Exploit Python: skynet-13 Homepage del Fornitore: www.ossec.net/ Li...

blankspace

Blank Space Blank Space è un refactoring del proof of concept originale di James Forshaw per CVE-2021-43893, escalation di privilegi tramite caricamento arbitrario di file EFSRPC. Blank Space può creare file arbitrari su un host remoto che utilizza la delega non vincolata se non è stato aggiornat...

CVE-2024-23772

CVE-2024-23772 - Schwachstelle zur Erstellung beliebiger Dateien Informationen werden zu gegebener Zeit folgen...

CVE-2021-4034-touch

CVE-2021-4034-touch touch फ़ाइलें बनाता है...

PT-2026-82649

So I'm a little confused with CVE-2026-65643. Why was cPanel 11.110 patched against this when it went end of life in July 2024. But cPanel 11.126, which reached end of life in July 2026, did not get this update. Is cPanel 11.126 not affected by this? I get the cPanel 11.126 isn't receiving update...

OverlayFS-PrivEsc-CVE-2022-0944

CVE-2022-0944: Privilege-Eskalations-Schwachstelle in OverlayFS 🛡️ Sicherheitshinweis und Anleitung zur Schadensbegrenzung für die Privilege-Escalation-Schwachstelle im OverlayFS des Linux-Kernels. 📜 Übersicht CVE-2022-0944 ist eine Sicherheitsschwachstelle im OverlayFS-Subsystem des Linux-Kernels...

CVE-2024-3400

CVE-2024-3400 Semplice codice Python per verificare il caricamento arbitrario su un PaloAlto Controlla semplicemente i codici di stato restituiti dal paloalto prima e dopo la creazione del file. Questo crea un nome file generato casualmente e tenta di richiamarlo dopo il POST. Questo salverà un...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP créé : try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...