EUVD-2026-104325

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0...

CVE-2026-111829 WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File Inclusion.This issue affects WP Mailster: from n/a through 1.9.1.0...

WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by V1T in WordPress Plugin WP Mailster versions = 1.9.1.0...

CVE-2024-51747

CVE-2024-51747 Log in with an administrator account and download the database in the system settings Modify projecthasfiles in the sqlite.db database Compress the modified sqlite.db with gzip and upload it. After uploading it to the project and clicking the file to view/download, the attacker can...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS Server RCE FOFA "HttpFileServer" Notes Affected range: HFS 2.3 and below Usage How To Use ulimit -n 999999; zmap -p PORT -B500M | go...

Chrome-Skia-CVE-2024-8636

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitrary File Overwrite Vulnerability...

kernel: Fix of 42 CVEs

Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...

CVE-2022-25581

CVE-2022-25581 Can't find it anywhere on the web, leaving a backup, Python exploit script , used to automate the following steps: ✅ Script Functionality Objectives 1. Log in to the backend obtain csrf and token 2. Construct a malicious request packet to upload a compressed archive containing a...

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by...

libgd: buffer overflow when processing specially crafted GIF file

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression...

CVE-2022-32119

CVE-2022-32119 - Arox-Unrestricted-File-Upload There are multiple unrestricted file uploads that result in the arbitrary execution of PHP code. Authenticated Vulnerable Pages: localhost/officeadmin/?pid=54&action=add -----------------------------181967832439954202373233921976 Content-Disposition:...

CVE-2026-98446

A flaw was found in the Linux kernel's XFS file system. When calculating space reservations for file system metadata, the kernel does not prevent an arithmetic underflow if the available reservable blocks drop below the amount already in use. A local user could exploit this condition during file...

CVE-2025-28915

CVE-2025-28915 Vulnerability Description: WordPress is a blog platform developed using PHP, supporting the setup of personal blog websites on servers running PHP and MySQL. WordPress ThemeEgg ToolKit versions 1.2.9 and earlier have a code issue vulnerability, which stems from allowing the upload ...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 Android privilege escalation to download arbitrary target app sandbox files. Usage ./CVE-2024-0044.sh Parameters Path to any local APK file Target app package name Example ./CVE-2024-0044.sh /path/to/target.apk com.target.mobile Description 1. Applicable...

CVE-2021-40438

CVE-2021-40438 exploit PoC with Docker setup CD into the directory containing the Apache configuration and Dockerfile shared in repo. Building Image: docker build -t cve-2021-40438:1.0 . Running the Docker Image: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 Note: You can also use Image ID...

libgd: buffer overflow when processing specially crafted GIF file

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression...

CVE-2023-22047-Oracle-PeopleSoft-LFI

🚀 CVE-2023-22047 - PeopleSoft LFI Exploit Unauthenticated Local File Inclusion LFI in Oracle PeopleSoft Enterprise PeopleTools 👨‍💻 Author 0xTerror Security Researcher | Exploit Developer 📋 Description CVE-2023-22047 is a critical unauthenticated Local File Inclusion LFI vulnerability discovered in...

libgd: buffer overflow when processing specially crafted GIF file

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Python 3 checker and configurable exploit hook for CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Product| REDCap Vanderbilt Affected| ≥ 13.3.0 until branch patch Fixed| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical...