2228 matches found
ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...
CVE-2026-121550
nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main accepts an existing NNNFIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular fil...
EUVD-2026-115895
nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main accepts an existing NNNFIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular fil...
CVE-2026-121550: jarun nnn: nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because…
nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main accepts an existing NNNFIFO path without verifying it is a FIFO. Attackers can pre-create the documented predictable /tmp/nnn.fifo path as a symlink or readable regular fil...
openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)
A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...
openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)
A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...
CVE-2026-119210
A flaw was found in MariaDB Connector/J. This vulnerability can lead to information disclosure when client-side local file handling is enabled. A compromised database server or a machine-in-the-middle attacker can provide crafted database or table identifiers that bypass filename validation check...
firefox: Mitigation bypass in the File Handling component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the File Handling component...
firefox: Mitigation bypass in the File Handling component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the File Handling component...
firefox: Mitigation bypass in the File Handling component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the File Handling component...
CVE-2025-6218
CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...
CVE-2017-8759
CVE-2017-8759 CVE-2017-8759 use file...
citrix_cve-2023-4966
citrixcve-2023-4966 Citrix CVE-2023-4966 from assetnote modified for parallel and file handling...
openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)
A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...
CVE-2023-40028
Proof of Concept PoC for CVE-2023-40028 CVE-2023-40028 is a vulnerability in Ghost CMS that allows arbitrary file reads through improper file handling. This PoC demonstrates how the exploit works under controlled conditions. Educational use only. Reference: Adapted from the original PoC by...
Fsociety-CVE-2024-0670-CheckMK-LPE
🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - Powerful System Access Made Simple 📦 Overview Hello friend. This tool unlocks advanced access for CheckMK CVE-2024-0670. It takes advantage of weak file handling to gain SYSTEM support. The software includes a specialized persistence feature. It is developed...
CVE-2024-21111
CVE-2024-21111 Oracle VirtualBox Prior to 7.0.16 is vulnerable to Local Privilege Escalation via Symbolic Link Following leading to Arbitrary File Delete and Arbitrary File Move. VirtualBox attempts to move log files as NT AUTHORITY\SYSTEM in C:\ProgramData\VirtualBox which all users can write to...
CVE-2026-20841-PoC
CVE-2026-20841-PoC Proof of Concept for CVE-2026-20841 CVE-2026-20841 – Details CVE-2026-20841 is a vulnerability affecting Microsoft Notepad, where specially crafted input can trigger unintended command execution. The issue occurs due to improper handling of certain file content or execution...