Güralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure. id: CVE-2022-38840 info: name: Güralp MAN-EAM-0003 3.2.4 - XML External Entity XXE author: daffainfo severity: high description: |...

Cellinx NVT Web Server - Local File Disclosure

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi. id: CVE-2023-23063 info: name: Cellinx NVT Web Server - Local File Disclosure author: daffainfo severity: high description: | Cellinx NVT v1.0.6.002b was discover...

Gotenberg < 8.34.0 - Local File Disclosure

Gotenberg before 8.34.0 allows SSRF and limited local file disclosure via its /forms/libreoffice/convert endpoint. When LibreOffice is used to convert user-uploaded DOCX files, external relationships within the document such as a:blip r:link TargetMode="External" can instruct LibreOffice to fetch...

CVE-2026-108591

InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to filegetcontents,...

CVE-2026-108591

InnoShop version 0.9.2 is vulnerable to a local file disclosure vulnerability. Authenticated administrators with files_create permissions can read sensitive server files by abusing the AI Core MCP file_upload tool's source argument. By providing file:// or php:// stream wrappers to the file_get_c...

EUVD-2026-96403

InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with filescreate permission to read server files by abusing the AI Core MCP fileupload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to filegetcontents,...

CVE-2023-39024-5-POC

CVE-2023-39024 e CVE-2023-39025 POC POC per CVE-2023-39024 e CVE-2023-39025 Harman Media Suite Panoramica Applicazione affetta: Harman Media Suite Versioni affette: 4.2.0 e precedenti Descrizione: Harman Media Suite versioni 4.2.0 e inferiori è vulnerabile a Server Side Request Forgery SSRF...

CVE-2021-41773

CVE-2021-41773 Playground === Questa è una piccola ricetta Docker per configurare un contenitore basato su Debian bookworm con un'istanza di Apache HTTPd 2.4.49 vulnerabile a CVE-2021-41773. CGI è stato esplicitamente abilitato in modo da poter essere utilizzato per testare/verificare il...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Beliebiges lokales Dateilesen https://www.metabaseq.com/imagemagick-zero-days/ Basierend auf dem PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC habe ich eine Schwachstellentestumgebung mit Docker erstellt. Verwendung get image docker pull...

CVE-2017-10617

CVE-2017-10616 & CVE-2017-10617 Queste due vulnerabilità riguardano Juniper Contrail versione 2.2, 3.0, 3.1 e 3.2: Credenziali hardcoded CVE-2017-10616 XML External Entity CVE-2017-10617 Il bollettino di sicurezza del fornitore è disponibile su Juniper Security Alert JSA10819 2017-10. Il servizio...

CVE-2025-12137

1 Helper per chiamare l'API REST del plugin con il nonce corrente async function iwpFetchpath, method='GET', body const nonce = window?.wpApiSettings?.nonce || jQuery?.ajaxSettings?.headers?.'X-WP-Nonce'; const res = await fetch$location.origin/wordpress/wp-json/iwp/v1$path, method, headers:...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Divulgazione del contenuto di file locali HDF5 tramite ExternalLink in Keras Due API pubbliche di Keras — keras.saving.KerasFileEditor e keras.saving.loadweights / model.loadweights — leggono i membri dei gruppi HDF5 tramite indicizzazione diretta senza un controllo del tipo di...

CVE-2026-30039

CVE-2026-30039 Materiali di advisory di sicurezza per CVE-2026-30039, un problema di estrazione di archivi basato su symlink in rarfile che interessa le versioni 4.2 e precedenti. Advisory in inglese | 中文版本 Panoramica rarfile estrae i collegamenti simbolici da archivi RAR controllati...

CVE-2022-0219

CVE-2022-0219 Jadx è vulnerabile alla Restrizione Impropria delle Entità Esterne XML CWE-611 quando esporta un file APK malevolo tramite l'opzione -e contenente un AndroidManifest.xml / strings.xml manipolato in gradle. Può portare alla divulgazione di file locali quando viene usato dalla CLI...

exploit-CVE-2019-14530

Exploit OpenEMR CVE-2019-14530 OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF e Divulgazione di File Locali Informazioni Questo repository fornisce una proof‑of‑concept per CVE‑2024‑58258 , una vulnerabilità di SugarCRM 13.0.4 / 14.0.1 in cui l'input utente viene interpretato come LESS nell'API /css/preview, consentendo SSRF o accesso a file...

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

USN-8897-1 lxml vulnerabilities

Guillem Lefait discovered that lxml incorrectly handled certain URL attributes. A remote attacker could possibly use this issue to bypass URL sanitization, leading to a cross-site scripting attack. CVE-2026-49825 Qiu Sihao discovered that lxml incorrectly handled untrusted XML input. A remote...

CVE-2026-102155

An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...

EUVD-2026-93953

An XML External Entity XXE injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service...