CVE-2024-29824

我已对 horizon3ai 中的脚本进行了一些优化（实际上只是添加了一个验证机制以确保准确性） 原始项目地址：https://github.com/horizon3ai/CVE-2024-29824 添加了 "-f / --file" 和 ThreadPool...

cve-lfi-lab

🧠 CVE Lab: Tier 1 SOC Analyst Simulation CVE-2025-39507 | WordPress Nasa Coreプラグインにおけるローカルファイルインクルード 📝 シナリオ: SOCの一日 いつもの月曜日。私はSOCダッシュボードにログインし、いつものようにアラートを確認しています。一つ目に留まるアラートが届きました： アラート: ローカルファイルインクルージョン LFI の可能性 IPアドレス: 203.0.113.44 URL: /index.php?file=../../../../etc/passwd ユーザーエージェント:...

VMWare-CVE-Check

VMWare-CVE-Check 用法: ./example.py/sh list.txt...

CVE-2020-14882

Thank you NS-Sp4ce、Jas502n、s1kr10s、demon、斯文 reference： https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and exit -u...

CVE-2026-82257

SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...

EUVD-2026-67583

SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...

CVE-2026-82257 SvelteKit before 2.69.1 Prototype Pollution via File Input

SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...

CVE-2026-82257 SvelteKit before 2.69.1 Prototype Pollution via File Input

SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input fields that accept arbitrary user-controlled path names. Attackers can manipulate the deletion path to remove methods on the prototype, potentially disabling application...

CVE-2026-82257

SvelteKit versions before 2.69.1 are affected by a prototype pollution vulnerability in remote form functions that accept file input fields with user-controlled path names. An attacker can manipulate the deletion path to remove methods on the object prototype, potentially disabling application fu...

Astra Linux – Vulnerability in Chromium

The incorrect security interface in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing through a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-17744

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17744

An inappropriate implementation flaw was found in the File Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500137309...

CVE-2026-17744

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-17744

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17744

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17744

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17744

CVE-2026-17744 affects Google Chrome on Linux and concerns an inappropriate implementation in the File Input path of Chrome/Chromium. The vulnerability could enable a sandbox escape through a crafted HTML page, with the root cause described as improper handling in the File Input component. Affect...

PT-2026-66063

Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-17744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape vi...

CVE-2026-13816

An insufficient validation of untrusted input flaw was found in the File Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511735715...