CVE-2026-78566 Shuffle <= 1.8 - Unauthenticated Local File Inclusion

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...

EUVD-2026-65326

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to...

CVE-2026-78566

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to and including 1.8 . An unauthenticated attacker over the network can include and execute arbitrary files on the server, enabling execution of any PHP code contained in those files. This may be used to bypa...

CVE-2026-78562

CVE-2026-78562 is a Local File Inclusion (LFI) vulnerability in the Verdure Core plugin for WordPress, affecting all versions up to and including 1.2 . An unauthenticated attacker can include and execute arbitrary files on the server, enabling PHP code execution in files already present (e.g., up...

EUVD-2026-65325

The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used...

CVE-2026-78562 Verdure Core <= 1.2 - Unauthenticated Local File Inclusion

The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Inclusione di file locale Descrizione : Customer Support System 1.0 è vulnerabile all'Inclusione di File Locali. Un utente autenticato ha la capacità di accedere e leggere file PHP dal sistema operativo sfruttando una vulnerabilità di Inclusione di Fil...

gitlab-12.9.0-file-read

التحذير لأغراض العرض التوضيحي والاختراق الأخلاقي فقط. ما هي؟ نص برمجي يطمح لأن يكون أفضل مما هو موجود على exploit-db حول قراءة الملفات التعسفية بعد المصادقة على GitLab v12.9.0 CVE-2020-10977 الطريقة 1. ثبّت التبعية غالبًا لديك الباقي بالفعل pip3 install requests python-gitlab 2. احصل على رمز API...

CVE-2024-6330

CVE-2024-6330 GEO my WordPress = 4.5.0.1 - Inclusione di File Locale non autenticata Descrizione Il plugin GEO my WP per WordPress è vulnerabile all'Inclusione di File Locale in tutte le versioni fino alla 4.5.0.1 inclusa tramite il parametro 'forminfowindowtemplatecontentpath'. Ciò consente a...

CVE-2024-3806

CVE-2024-3806 Porto = 7.1.0 - Inclusione di file locale non autenticata tramite portoajaxposts Descrizione Il tema Porto per WordPress è vulnerabile all'inclusione di file locale in tutte le versioni fino alla 7.1.0 inclusa tramite la funzione 'portoajaxposts'. Ciò rende possibile per attaccanti...

CVE-2026-78478

The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypas...

PRTG Network Monitor - Local File Inclusion

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges including administrator. A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local...

Apache Flink - Local File Inclusion

Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process aka local file inclusion. id: CVE-2020-17519 info: name: Apache Flink - Local File Inclusion author: pdtea...

PoC-RCE-Rukovoditel

PoC-RCE-Rukovoditel Prova de conceito para CVE-2020-11819 e CVE-2020-15946. Testado no Rukovoditel 2.4.x, 2.5.x e 2.6.1 Descrição: Este exploit possui dois modos de execução, utilizando a vulnerabilidade de fixação de sessão CVE-2020-15946 ou usando as credenciais de acesso de qualquer conta em...

CVE-2026-78478

The Måne theme for WordPress is affected by an unauthenticated Local File Inclusion vulnerability in all versions up to and including 1.7 . An attacker can include and execute arbitrary files on the server, enabling execution of any PHP code within those files. This can be leveraged to bypass acc...

EUVD-2026-65303

The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypas...

CVE-2026-78478 Måne <= 1.7 - Unauthenticated Local File Inclusion

The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypas...

CrushFTP-SSTI-LFI-Proof-of-Concept

CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept Nur für Bildungs- und autorisierte Laborzwecke. CS443 Software- und Systemsicherheit — kontrollierte lokale Docker-Umgebung. Schwachstellenübersicht...

CVE-2026-14280

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the emoptionssave function. This makes it possible for authenticated attackers, with administrator-level access and above, to...

CVE-2026-14280

The Events Manager WordPress plugin (≤ 7.3.7.4) is vulnerable to Local File Inclusion via the em_options_save function, specifically through manipulated dbem_data[updates] array keys. An attacker with administrator-level access or above can store a malicious traversal key that is subsequently exe...