Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, whi...

simvyn

simvyn 通用移动开发工具 — 通过单一仪表板和 CLI 控制 iOS 模拟器、Android 模拟器和真实设备 目录 快速开始 安装 AI 编码代理 功能特性 模块展示 集合指南 CLI 参考 工作原理 支持的平台 贡献 安全 许可证 快速开始bash npx simvyn root@kitploit: 启动本地服务器，在浏览器中打开 Web 仪表板，并自动发现所有已连接的模拟器、仿真器和通过 USB 连接的物理设备。 安装 全局安装：bash npm install -g simvyn 一次性使用（无需安装）： bash npx simvyn root@kitploit: 环境要...

CVE-2021-21234

CVE-2021-21234 spring-boot-actuator-logview 库中的目录遍历漏洞 https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

skype-log-viewer

skype-log-viewer 无需Skype即可下载和查看Skype历史 该程序允许您查看所有Skype聊天记录，并轻松将其导出为文本文件。 它能正确按对话组织记录，确保群组对话不会与一对一聊天混在一起。 功能 下载Skype日志 损坏的数据库支持 更改导出格式 按Skype中的对话组织 代码许可 GNU GPL v2 内容许可 Creative Commons 3.0 BY-SA 行为准则 尊重每一位成员。...

CVE-2026-67599_ClearOS_RCE

Inyección de comandos del sistema operativo en el parámetro Filter del Log Viewer Paquete: ClearFoundation Versiones probadas: ClearOS 7.9.1.342252 Tipo de vulnerabilidad: Inyección de comandos del sistema operativo CWE-78 Gravedad: Alta CVE : CVE-2026-67599 Vector CVSS v3.1:...

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Descripción El plugin Error Log Viewer By WP Guru para WordPress es vulnerable a la Lectura Arbitraria de Archivos en todas las versiones hasta, e incluyendo, la 1.0.1.3 a través de la acción AJAX wpajaxnoprivelvwplogdownload. Esto permite que atacantes no autenticados lean e...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Falta de autorización para lectura arbitraria de archivos sin autenticar Descripción El plugin Error Log Viewer By WP Guru para WordPress es vulnerable a la lectura arbitraria de archivos en todas las versiones hasta la 1.0.1.3 inclusive, a...

BIT-JENKINS-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

EUVD-2026-70114

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

CVE-2026-84648

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

CVE-2026-84648

CVE-2026-84648 is a stored cross-site scripting (XSS) vulnerability in the system log viewer of Jenkins 2.579 and earlier (LTS 2.568.2 and earlier). The root cause is the failure to escape log record metadata (source, level, and timestamp) before rendering, allowing attackers who control agent pr...

Stored XSS vulnerability in system log viewer

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes. TIP: On Jenkins 2.539 and newer, LTS...

PT-2026-84771

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata source, level, and timestamp resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers in control of agent processes...

CVE-2026-78613

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-78613

WatchGuard Dimension is affected by an authenticated SQL injection vulnerability in the log viewer feature . An authenticated user holding report administration permissions can send specially crafted requests to gain arbitrary command execution as the Dimension WebUI process user. The CVSS 4.0 ba...

CVE-2026-78613 Dimension SQL Injection in Log Viewer

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...

CVE-2026-64967 Path Traversal in ATutor

A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...

CVE-2026-64967

ATutor's error log viewer contains a path traversal flaw allowing an admin to read arbitrary files outside the logs directory. Version 2.2.4 is confirmed vulnerable; the product is no longer supported and no fix exists, so migration to a maintained alternative is the only remediation. Exploitatio...