CVE-2026-18515

IBM i Navigator for i is vulnerable to improper path validation (CWE-22, Path Traversal), allowing a remote authenticated attacker to place files into locations in the file system that Navigator configuration intended to block. The impact is limited: the condition applies only if the user's profi...

CVE-2026-18515 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to place files into the file system with Navigator for i when they should be blocked by Navigator configuration. This could allow attackers to upload files onto the system to places the Navigator support did not intend, but...

CVE-2026-12277

CVE-2026-12277 Frontend File Manager 插件 WordPress = 23.6 - 未认证任意文件删除导致 RCE 摘要...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns 一个托管了关于零日漏洞 CVE-2021-25679、CVE-2021-25680 和 CVE-2021-25681 的说明文档的仓库。 摘要 CVE-2021-25679：Adtran Personal Phone Manager 中更改电子邮件地址表单的认证存储型XSS漏洞 CVE-2021-25680：Adtran Personal Phone Manager 多个反射型XSS漏洞 CVE-2021-25681：AdTran Personal Phone Manager DNS 数据渗出漏洞...

CVE-2026-76443

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-20353

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-43867

camel-pqc AWS Secrets Manager Key-Metadata Unsafe Deserialization Reproducer CVE-2026-43867 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-pqc component, tracked as CVE-2026-43867. AwsSecretsManagerKeyLifecycleManager.deserializeMetadata reads persisted...

CVE-2026-18366

CVE-2026-18366 Events Manager 7.4.1 - Escalada de Privilegios No Autenticada a Administrador 🔗 Mantente Actualizado Para los últimos zero-days, exploits e investigación de seguridad 📋 Resumen de la Vulnerabilidad 🔍 Descripción Técnica Análisis de la Causa Raíz La vulnerabilidad existe en...

CVE-2026-81301

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File.... It then supports query, openFile,...

CVE-2026-76443

CVE-2026-76443 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager , where internally discovered vulnerabilities involving improper neutralization (CWE-707) were identified during a comprehensive internal security review. The issues are addressed through software hardening r...

CVE-2026-76441 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76440 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77620

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

ROOT-APP-NPM-GHSA-6V7Q-WJVX-W8WG GHSA-6v7q-wjvx-w8wg in basic-ftp - Patched by Root

Root has patched GHSA-6v7q-wjvx-w8wg in the basic-ftp package for Root:npm. Multiple fixed versions available...

CVE-2026-81301

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps a caller-controlled URI path directly to a filesystem path via new File(...), supporting query() , openFile() , and delete() ...

EUVD-2026-77584

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File.... It then supports query, openFile,...

CVE-2026-81301 Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access

Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File.... It then supports query, openFile,...

CVE-2023-33829-POC

CVE-2023-33829-POC SCM Manager XSS...

CVE-2021-45010

CVE-2021-45010 🐍 为CVE-2021-45010设计的Python PoC漏洞利用。 Tiny File Manager 2.4.7 使用方法 root@kitploit: usage: main.py -h -u URL -l USERNAME -p PASSWORD -g GUIPATH -r FSRELPATH options: -h, --help show this help message and exit -u URL, --url URL Base URL -l USERNAME, --username USERNAME Username -p...

Python-exploit-CVE-2020-25213

描述 WordPress的File Manager wp-file-manager 插件6.9之前的版本允许远程攻击者上传并执行任意PHP代码，因为它将一个不安全的示例elFinder连接器文件重命名为.php扩展名。例如，这允许攻击者运行elFinder的upload（或mkfile和put）命令，将PHP代码写入 wp-content/plugins/wp-file-manager/lib/files/ 目录。该漏洞于2020年8月和9月在野外被利用。 演示 root@kitploit: python3 exploit.py url command python3 exploit.p...