27289 matches found
EUVD-2026-37649
Unauthenticated Local File Inclusion in Reprizo = 1.0.8 versions...
EUVD-2026-37653
Unauthenticated Local File Inclusion in Right Way = 4.0 versions...
EUVD-2025-210235
Unauthenticated Local File Inclusion in Resurs = 1.3 versions...
EUVD-2025-210232
Unauthenticated Local File Inclusion in Quirky = 1.23 versions...
EUVD-2025-210236
Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...
EUVD-2025-210234
Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...
EUVD-2025-210233
Unauthenticated Local File Inclusion in Snowy = 1.13 versions...
EUVD-2025-210231
Unauthenticated Local File Inclusion in Gat = 1.16 versions...
EUVD-2025-210226
Unauthenticated Local File Inclusion in AirSupply = 2.0.0 versions...
EUVD-2025-210227
Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...
EUVD-2025-210219
Unauthenticated Local File Inclusion in Joly = 1.22.0 versions...
EUVD-2025-210220
Unauthenticated Local File Inclusion in HomeRoofer = 2.11.0 versions...
EUVD-2025-210218
Unauthenticated Local File Inclusion in Neuronet 1.14.0 versions...
CVE-2025-26240
In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...
DEBIAN-CVE-2025-26240
In JazzCore python-pdfkit 1.0.0, the fromstring method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files...
dotnet: .NET: Local file tampering via link following vulnerability
A flaw was found in .NET's System.Formats.Tar library. When extracting a specially crafted TAR archive containing symbolic links, the TarFile.ExtractToDirectory method may incorrectly follow those links and write files outside the intended extraction directory. An attacker could exploit this issu...
The Red Agent POV: How it Reasoned its Way to SSRF
Part 1: How the Red Agent uncovered a multi-step attack chain allowing SSRF-to-Local-File-Read on a GCP Cloud Run API...
CVE-2026-54814
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors allows PHP Local File Inclusion. This issue affects Motors: from n/a through 1.4.109...