1238 matches found
dnssearch
dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...
dirsearch
DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...
webuploader-0.1.15-Demo
webuploader-v-0.1.15 Component Has an Unauthorized File Upload Vulnerability Introduction: Baidu's WebUploader component has a file upload vulnerability. This vulnerability is caused by the upload page of the WebUploader component not strictly filtering file types or file extensions. Attackers ca...
CVE-2026-126950
Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated attackers to delete arbitrary server files by injecting traversal sequences via the x-zipline-file-extension header. Attackers can upload a file with a poisoned stored name and short expiry so LocalDatasource...
CVE-2026-126950
The software Zipline version 4.4.0 and below is vulnerable to a path traversal vulnerability. An authenticated attacker can delete arbitrary server files by injecting traversal sequences via the x-zipline-file-extension header. The attack involves uploading a file with a poisoned stored name and ...
EUVD-2026-125115
Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated attackers to delete arbitrary server files by injecting traversal sequences via the x-zipline-file-extension header. Attackers can upload a file with a poisoned stored name and short expiry so LocalDatasource...
CVE-2023-38831
CVE-2023-38831 Exploit - Bait and Switch Archive Generator Overview This Python script is designed to generate a "bait and switch" archive file. It is meant for educational and ethical hacking purposes only. Please ensure that you have the necessary permissions before using this script. A "bait a...
Lightdash version <= 0.510.3 Arbitrary File Read
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension .csv or .png is used. id: CVE-2023-35844 info: name: Lightdash version = 0.510.3 Arbitrary File Read author: dwisiswant0...
CVE-2024-39929
Exim CVE-2024-39929 Exploit PoC This repository contains a Proof-of-Concept PoC script to exploit the Exim vulnerability CVE-2024-39929. The vulnerability affects Exim versions prior to 4.98, allowing attackers to bypass file extension blocking mechanisms and potentially deliver executable...
CVE-2023-38831-KQL
CVE-2023-38831 - WinRAR File Extension Spoofing Vulnerability Description Cybercriminals have exploited a vulnerability allowing them to spoof file extensions. This means they can hide the launch of malicious scripts within archives pretending to be common file types such as .jpg, .txt, etc. This...
CVE-2026-93235
A flaw was found in the Flash-Friendly File System F2FS in the Linux kernel. When a file is extended across an unaligned End-of-File EOF boundary, the kernel fails to zero out data beyond the previous EOF before writing changes to disk. A local user can exploit this vulnerability by performing fi...
DEBIAN-CVE-2026-126186
Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Blobopen writes a blob to a tempfile whose name carries the extension of the uploaded filename, and hands that path to ffpro...
CVE-2026-126186: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…
Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record objects. Prior to 8.1.4.1 and 8.0.5.2, ActiveStorage::Blobopen writes a blob to a tempfile whose name carries the extension of the uploaded filename, and hands that path to ffpro...
CLEANSTART-2024-KW08728 newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as
Security vulnerability affects the firefox-esr package. A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as...
CVE-2026-116269
A flaw was found in MIME-tools. When parsing email attachment filenames that contain hyphenated language tags, the decoder fails to properly process the character set and incorrectly returns an empty filename. A remote attacker can exploit this flaw by sending a specially crafted email message to...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because the system fails to detect the status of file extension attributes during the early stages of reading a read-only file system; as a...
SUSE CVE-2026-98686
In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3zerorange removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data...
DEBIAN-CVE-2026-98686
In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3zerorange removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data...
CVE-2026-98686
In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3zerorange removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data...
DEBIAN-CVE-2026-98685
In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via clone range cifsremapfilerange discarded the pagecache only for the folios overlapping the destination region, so when a clone extends the file the folio straddlin...