EUVD-2026-88375

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2024-34471

CVE-2024-34471 Descripción: Un usuario autenticado puede abusar de una vulnerabilidad de Path Traversal que resulta en la eliminación de archivos si tiene permisos de escritura en el archivo mliRealtimeEmails.php. El parámetro filename en la funcionalidad de exportación HTML no valida correctamen...

CVE-2020-5398

CVE-2020-5398 - Ataque RFD Reflected File Download para Spring MVC En Spring Framework, las versiones 5.2.x anteriores a 5.2.3, las versiones 5.1.x anteriores a 5.1.13 y las versiones 5.0.x anteriores a 5.0.16, una aplicación es vulnerable a un ataque de descarga de archivos reflejada RFD cuando...

CVE-2026-40987

CVE-2026-40987: PoC de Path Traversal en la sincronización remota de archivos de Spring Integration Este repositorio es un PoC mínimo para reproducir CVE-2026-40987, publicado en el aviso de seguridad oficial de Spring. Aviso oficial: https://spring.io/security/cve-2026-40987/ Título oficial:...

CVE-2026-5718-Lab

CVE-2026-5718 Local Docker Lab Local-only vulnerable vs patched Docker lab for CVE-2026-5718 , affecting the WordPress plugin Drag and Drop Multiple File Upload for Contact Form 7. This lab demonstrates the difference between the vulnerable version 1.3.9.6 and the patched version 1.3.9.7 using a...

POC-CVE-2026-19681

CVE-2026-19681 — command injection in file upload processing authenticated Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. Staged filename p;sleep$IFS20;-EvvfJk via POST /rest/file/upload context prefix carries the metachars, then POST /rest/auditFile type=scapLinux, version=1.2 stalled exact...

shortscan

🌀 Shortscan Una herramienta de enumeración de nombres cortos de archivos en IIS. Funcionalidad Shortscan está diseñado para determinar rápidamente qué archivos con nombres cortos existen en un servidor web IIS. Una vez identificado un nombre corto, la herramienta intentará identificar...

CVE-2022-29598

CVE-2022-29598 : Cross-Site Scripting XSS Reflejado en RSS v500 URL de Mitre: https://vulners.com/cve/CVE-2022-29598 URL de NIST: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 La aplicación RRS v500 de Solutions Atlantic es vulnerable a una vulnerabilidad de Cross-Site Scripting XSS reflejado. ...

CVE-2022-23935

CVE-2022-23935 El programa de software Exiftool, en versiones anteriores a la 12.38, tiene una vulnerabilidad de seguridad que puede explotarse mediante un nombre de archivo especialmente diseñado. Esta vulnerabilidad permite la inyección de comandos, donde un atacante puede ejecutar comandos...

CVE-2017-12615-EXP

CVE-2017-12615-EXP root@kitploit: .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !:...

CVE-2024-39929

CVE-2024-39929 PoC Vulnerability Brief Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mimefilename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users. How does this...

CVE-2020-12112

CVE-2020-12112 🚨 Las versiones de BigBlueButton inferiores a 2.2.4 tienen una vulnerabilidad LFI que permite el acceso a archivos sensibles. Historia 📜 Durante un curso de aprendizaje a distancia en una instancia de BigBlueButton, un estudiante de mi clase compartió el enlace de la presentación d...

vaultize_CVE-2024-36079

About Vulnerability The on-premise Vaultize DRM v.21.07.27 is vulnerable to the upload of arbitrary files. Files whose names contain part of the absolute path of the file system may be uploaded due to the lack of filename filtering. When you try to download the files the application creates a...

CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC In version 2.0.19 of Flawfinder, no filename sanitization occurs when parsing possibly malicious filenames. Known affected terminals are libvte based, and the example below shows a mate-terminal. This exploit has since been fixed in version 2.0.20 as of 5/17/26 by Davi...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

Movies <= 0.6 - Cross-Site Scripting

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4539 info: name: Movies = 0.6 - Cross-Site Scripting author: daffainfo...

Langflow <= 1.8.4 - Path Traversal to RCE via File Upload

The application contains a path traversal vulnerability caused by unsanitized 'filename' parameter in the 'POST /api/v2/files' multipart form data, letting attackers write files to arbitrary filesystem locations, exploit requires crafted request. id: CVE-2026-5027 info: name: Langflow = 1.8.4 -...

Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal

Dify version 1.14.1 and prior are affected by an unauthenticated path traversal in the Plugin Daemon icon proxy endpoint. The /console/api/workspaces/current/plugin/icon endpoint requires no authentication and passes the filename query parameter unsanitized into the internal Plugin Daemon REST AP...

Avid NEXIS Agent - Arbitrary File Read

Avid NEXIS E-series, F-series, PRO+, and System Director Appliance SDA+ before 2025.5.1 contain an unauthenticated arbitrary file read caused by improper validation of the filename parameter, letting unauthenticated attackers read sensitive files, exploit requires no authentication. id:...

CodiMD <2.5.4 - Insecure Filename Randomization

CodiMD does not require valid authentication to access uploaded images or to upload new image data. An attacker who can determine an uploaded image's URL can gain unauthorised access to uploaded image data. Due to the insecure random filename generation in the underlying Formidable library, an...