WordPress plugin Upload Files Anywhere 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

PT-2026-21161

Name of the Vulnerable Software and Affected Versions vanquish Upload Files Anywhere versions prior to 2.9 Description The software contains a flaw related to improper limitation of a pathname to a restricted directory, also known as a Path Traversal issue. This impacts the Upload Files Anywhere...

PT-2026-21025

Name of the Vulnerable Software and Affected Versions Shared Files versions through 1.7.19 Description A missing authorization flaw exists in Anssi Laitila Shared Files shared-files. The issue impacts the application's ability to properly restrict access to resources. Recommendations Update to a...

WordPress plugin Shared Files 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

RustDesk 后置链接漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. The RustDesk Client for Windows has a post-release link vulnerability, which stems from a symbolic link iss...

Tanium TanOS 安全漏洞

Tanium TanOS is a proprietary operating system developed by the American company Tanium. Tanium TanOS has a security vulnerability that stems from the insertion of sensitive information into log files. This vulnerability may allow attackers with access to TanOS’ syslog output to obtain the...

Tanium Interact和Tanium TDS 安全漏洞

Tanium Interact and Tanium TDS are both products of the American company Tanium. Tanium Interact is a query and interaction component for terminal management platforms. Tanium TDS is a cache library component for terminal data. Both Tanium Interact and Tanium TDS have security vulnerabilities...

Tanium Trends 安全漏洞

Tanium Trends is a data visualization and historical analysis module provided by the American company Tanium. Tanium Trends has a security vulnerability, which stems from the insertion of sensitive information into log files. This vulnerability may allow attackers with access to the logs of the...

PT-2026-21327

GetSimple CMS is a content management system. All versions of GetSimple CMS have a flaw in the Uploaded Files feature that allows for arbitrary file reads. This issue has not been fixed at the time of publication...

PT-2026-21184

Name of the Vulnerable Software and Affected Versions Bravis Addons versions through 1.1.9 Description The software contains a flaw due to unrestricted file upload with a dangerous file type. This allows the use of malicious files. Recommendations Update Bravis Addons to a version later than 1.1....

WordPress plugin Bravis Addons 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

📄 Sophos Web Virtual Appliance 3.7.0 Directory Traversal

Proof of concept exploit for an older vulnerability from 2013 where Sophos Web Virtual Appliance version 3.7.0 suffered from a directory traversal vulnerability...

CVE-2026-26321

OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed sendMediaFeishu to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly. If an attacker can influence tool calls directly or via prompt injection...

CVE-2026-2350

CVE-2026-2350 affects Tanium Interact and TDS, describing an insertion of sensitive information into log files. The CVSSv3.1 base score is 6.5 (MEDIUM) with a network attack vector, low attack complexity, and low privileges required; no user interaction. The impact is limited to confidentiality (...

CVE-2026-2350 Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-1292

Affects Tanium Trends (log handling). The CVE-2026-1292 entry describes an issue classified as a log-file insertion vulnerability impacting confidentiality (C High) with no integrity/availability impact, base score 6.5 (CVSS 3.1, Network, Low attack complexity, Privileges required Low, User inter...

CVE-2026-2605 Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

CVE-2026-26329 OpenClaw has a path traversal in browser upload allows local file read

OpenClaw is a personal AI assistant. Prior to version 2026.2.14, authenticated attackers can read arbitrary files from the Gateway host by supplying absolute paths or path traversal sequences to the browser tool's upload action. The server passed these paths to Playwright's setInputFiles APIs...

Exploit for CVE-2026-25890

CVE-2026-25890 - FileBrowser Access Control Bypass !Authorh...

Cross-site Scripting (XSS)

Overview pannellum is a lightweight, free, and open source panorama viewer for the web. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the attributes configuration property in hot spots. An attacker can execute arbitrary JavaScript code by supplying a malicious...