CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 सूचना लीक + RCE एक साथ यह POC लक्ष्य पर एक फ़ाइल लिखता है, यहाँ phpinfo लिखा गया है। यदि अन्य कार्यक्षमता की आवश्यकता हो, तो कृपया स्वयं संशोधित करें। अवैध उद्देश्यों के लिए उपयोग न करें।...

CVE-2026-49049

CVE-2026-49049 भेद्यता अनुसंधान: JoomShaper Helix3 Joomla में अप्रमाणित मनमाना फ़ाइल लेखन रिपॉजिटरी में CVE-2026-49049 नामक गंभीर भेद्यता के लिए सामग्री, तकनीकी विश्लेषण और प्रूफ ऑफ कॉन्सेप्ट PoC शामिल हैं, जो Joomla CMS के लिए JoomShaper के Helix3 टेम्पलेट फ्रेमवर्क संस्करण 1.0 से 3.1.0 तक में प...

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26

CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 استغلال آلي بالكامل لـ CVE-2024-25641. عندما يكون المستخدم مصادقًا، يكون إصدار Cacti 1.2.26 عرضة لثغرة كتابة ملفات عشوائية، قابلة للاستغلال عبر ميزة "استيراد الحزم" Package Import، مما يسمح للمستخدمين المصادقين الذين لديهم صلاحية "استيراد القوالب"...

PT-2026-107212

An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow a local attacker to execute...

PT-2026-106821

Name of the Vulnerable Software and Affected Versions @quasar/icongenie versions prior to 6.1.1 Description The icongenie generate --profile command fails to constrain the resolved destination to the Quasar project directory when processing folder and name values from a user-supplied profile. The...

PT-2026-107137

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

PT-2026-107136

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-95140

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...

Fortinet FortiMail Path Traversal / NULL Byte Arbitrary File Write (FG-IR-26-175)

The version of FortiMail installed on the remote host is affected by a path traversal vulnerability as referenced in the FG-IR-26-175 advisory. - An improper limitation of a pathname to a restricted directory 'Path Traversal' combined with an improper neutralization of NULL byte or NULL character...

SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:23984-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23984-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. -...

EUVD-2026-91675

uv: Path traversal on Windows through wheel extraction...

Nx: Path traversal in nx migrate package-migrations extraction

Summary nx migrate reads each target package's nx-migrations.migrations value from its manifest and extracts the referenced file to a path built by joining that value onto a temporary directory. The value is never validated, so a package whose migrations field contains .. segments or an absolute...

GHSA-HRVQ-X7JP-36XV Nx: Path traversal in nx migrate package-migrations extraction

Summary nx migrate reads each target package's nx-migrations.migrations value from its manifest and extracts the referenced file to a path built by joining that value onto a temporary directory. The value is never validated, so a package whose migrations field contains .. segments or an absolute...

PYSEC-2026-4191

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

CVE-2026-105744

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

CVE-2025-9074

CVE-2025-9074 – Docker Desktop ويندوز: كتابة من الحاوية إلى المضيف عبر واجهة برمجة تطبيقات المحرك المكشوفة المؤلف: w01f الحالة: إثبات المفهوم تعليمي / للاختبار المصرّح به فقط نظرة عامة يعرض هذا المشروع نموذجًا لإثبات المفهوم PoC لثغرة CVE-2025-9074 ، وهي سوء تكوين/تعريض في إصدارات معينة من Docker...

CVE-2026-105744 Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

CVE-2026-105744

The Docling library (versions 2.94.0 through 2.132.0 ) is vulnerable to arbitrary file read/write and potential command execution when using the opt-in Tectonic engine to render untrusted TikZ. The root cause lies in docling/backend/latex/engines/tectonic.py, which fails to restrict TeX primitive...

CVE-2026-66906

CVE-2026-66906 — اجتياز المسار في camel-azure-storage-blob downloadBlobToFile أدوات إثبات مفهوم PoC قابلة للتشغيل تُعيد إنتاج نفس ثغرة Apache Camel، واحدة لكل بيئة تشغيل: بيئة التشغيل| الدليل| المكدس ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-blob...

CVE-2026-67206

CVE-2026-67206 - Wolf CMS -u -p python exploit.py http://127.0.0.1:8080/ -u admin -p admin مثال └─$ python exploit.py http://127.0.0.1:8080/ -u admin -p 12966cc814K Logging in with provided credentials... + Login successfu...