CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Ejecución Remota de Código RCE Prueba de Concepto Más información: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/...

ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)

ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...

pypacker

Información general Este es Pypacker: la biblioteca de manipulación de paquetes de bajo nivel más rápida y simple para Python. Vea los ejemplos a continuación para ver qué puede hacer con ella. Si desea apoyar este proyecto puede a través de PayPal. Qué puedes hacer con Pypacker Crear paquetes...

citrix_cve-2023-4966

citrixcve-2023-4966 Citrix CVE-2023-4966 de assetnote modificado para manejo en paralelo y de archivos...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox anterior a 7.0.16 es vulnerable a una escalada de privilegios local mediante el seguimiento de enlaces simbólicos que conduce a la eliminación arbitraria de archivos y al movimiento arbitrario de archivos. VirtualBox intenta mover archivos de registro como NT...

CVE-2026-25265

Privilege escalation due to weak configuration while temporary file handling...

Fsociety-CVE-2024-0670-CheckMK-LPE

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - Acceso Poderoso al Sistema Hecho Simple 📦 Resumen Hola amigo. Esta herramienta desbloquea acceso avanzado para CheckMK CVE-2024-0670. Aprovecha un manejo débil de archivos para obtener soporte de SYSTEM. El software incluye una función especializada de...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling, which allows attackers to carry out spoofing attacks.

The vulnerability of the microprogrammed software of Tenda W3002R, A302, and W309R lies in the lack of proper cookie file handling. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the final destination /goform/AdvSetD...

CVE-2026-20841-PoC

CVE-2026-20841-PoC Prueba de concepto para CVE-2026-20841 CVE-2026-20841 – Detalles CVE-2026-20841 es una vulnerabilidad que afecta al Bloc de notas de Microsoft, donde una entrada especialmente diseñada puede desencadenar la ejecución no deseada de comandos. El problema ocurre debido al manejo...

CVE-2017-8759

CVE-2017-8759 CVE-2017-8759 usar archivo...

CVE-2023-40028

Prueba de Concepto PoC para CVE-2023-40028 CVE-2023-40028 es una vulnerabilidad en Ghost CMS que permite la lectura arbitraria de archivos mediante un manejo inadecuado de archivos. Esta PoC demuestra cómo funciona el exploit en condiciones controladas. Solo con fines educativos. Referencia:...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

CVE-2026-86883 is a privacy vulnerability in iOS 27, iPadOS 27, and visionOS 27 caused by improper handling of files. An unprivileged app may access sensitive user data belonging to other apps, representing an exposure of sensitive information to an unauthorized actor. The issue was fixed through...

EUVD-2026-78120

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

Astra Linux – Vulnerability in Firefox, Thunderbird

Bypass of mitigation mechanisms in the File Handling component. This vulnerability has been fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – Vulnerability in pillow

A issue was discovered in Pillow before version 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a denial-of-service attack on Image.open prior to Image.load...

Astra Linux – Vulnerability in open-vm-tools

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper with local files to trigger insecure file operations within that VM...