111704 matches found
PT-2026-69360
Name of the Vulnerable Software and Affected Versions JetEngine WordPress plugin versions prior to 3.8.13.1 Description Stored Cross-Site Scripting occurs because the software fails to sanitize uploaded SVG files before storing and serving them. Additionally, the system does not adequately restri...
MAL-2026-13667 Malicious code in kotanku (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2281ff1cf735f26084f13f5f3ef5e1d5f9faf8cf06254532e5ee6d27204f52d1 During import, the package exfiltrates cryptocurrency wallet files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
CVE-2026-19363
A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown function of the file src/handler.rs of the component Lambda Authorizer. The manipulation results in sensitive information in log files. The attack can be executed remotely. "src/handler.rs" logs raw...
Nightmare-Windows-0-day-exp
Windows Zero-Day Exploit Collection !Research Use Onlyhtt...
CVE-2026-18465
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...
CVE-2026-18465
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...
EUVD-2026-54879
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...
CVE-2026-10595 Path Traversal Vulnerability in parisneo/lollms
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in backend/routers/ui.py. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without...
CVE-2026-10595
A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in "backend/routers/ui.py". The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without...
PT-2026-69307
Name of the Vulnerable Software and Affected Versions Ichigo3766 image-gen-mcp version 0.1.0 Description A path traversal issue exists within the upscale images component in the src/index.ts file. A local attacker can manipulate the output path argument to access or overwrite files outside the...
PT-2026-69253
Name of the Vulnerable Software and Affected Versions parisneo/lollms versions prior to 3 Description A path traversal issue exists in the SPA catch-all route implemented in backend/routers/ui.py. The flaw occurs because user-controlled path input is joined into a filesystem path without proper...
Snipe-IT CVE-2026-37709 File Upload Detect
Detects CVE-2026-37709 in Snipe-IT ≤ 8.4.0 fixed in 8.4.1: POST /api/v1/objecttype/id/files checks the view permission instead of update, so any API user with view-only access can upload files to visible objects. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Snipe-IT CVE-2026-37709 view-onl...
Snipe-IT View-Only File Upload Bypass (CVE-2026-37709)
CVE-2026-37709 in Snipe-IT ≤ 8.4.0 fixed in 8.4.1: the file upload endpoint POST /api/v1/objecttype/id/files checks the view permission gate instead of update. Any API user with view-only access can upload arbitrary files to any visible object. On misconfigured servers PHP execution under...
CVE-2026-16953
The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before deletion, authorising the action solely by a client-supplied session cookie value, so an unauthenticated attacker who obtains a victim's session identifier and file reference can delet...
CVE-2026-16953
The AI Engine WordPress plugin (versions prior to 3.6.4 ) is vulnerable to an authorization bypass that allows for unauthenticated cross-session chatbot file deletion. The root cause is that the plugin fails to verify ownership of files uploaded by guests, instead authorizing deletion actions sol...
EUVD-2026-54744
The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before deletion, authorising the action solely by a client-supplied session cookie value, so an unauthenticated attacker who obtains a victim's session identifier and file reference can delet...
CVE-2026-16953
The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before deletion, authorising the action solely by a client-supplied session cookie value, so an unauthenticated attacker who obtains a victim's session identifier and file reference can delet...
CVE-2026-16953 AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie
The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before deletion, authorising the action solely by a client-supplied session cookie value, so an unauthenticated attacker who obtains a victim's session identifier and file reference can delet...
EUVD-2026-54736
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant...
