Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

CVE-2026-82627

The Uncanny Automator plugin for WordPress (versions up to and including 7.6.1.1 ) is vulnerable to PHP Object Injection due to the deserialization of untrusted input. This flaw allows authenticated attackers with Subscriber-level access or higher to inject a PHP Object. The attack is feasible wh...

EUVD-2026-94658

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...

CVE-2026-82627 Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...

PT-2026-107829

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including...

PT-2026-107767

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...

PT-2026-108168

Name of the Vulnerable Software and Affected Versions MongoDB PHP Driver affected versions not specified Description The BSON encoder fails to verify certain return values when a document exceeds the size limit of libbson, which can leave the encoder in an invalid state. An unauthenticated actor...

PT-2026-107989

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...

PT-2026-108167

Name of the Vulnerable Software and Affected Versions MongoDB PHP Driver affected versions not specified Description The BSON encoder converts a string length to a 32-bit value without proper validation. If an application encodes a string close to 4 GiB, the allocation size may wrap around while...

PT-2026-107851

Name of the Vulnerable Software and Affected Versions Bricksforge versions prior to 3.1.8.10 Description An unauthenticated arbitrary file upload issue exists due to insufficient validation of the attacker-controlled URL field within the temporaryFileUploads parameter during form submission. An...

CVE-2022-1329

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 تنفيذ التعليمات البرمجية عن بُعد التاريخ: 16 أبريل 2023 مؤلف الاستغلال: Việt Hùng https://github.com/phanthibichtram12 الصفحة الرئيسية للمورّد: https://elementor.com/ رابط البرنامج: https://wordpress.org/plugins/elementor/advanced/ مرر لأسفل واختر...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf استغلال مولّد الخطوط المتغيرة VariaType يحتوي هذا المستودع على استغلال متخصص لجهاز VariaType على منصة Hack The Box. يستغل هذا الاستغلال ثغرة في كيفية تعامل مكتبة fontTools أو تطبيق الويب مع ملفات .designspace الخاصة بـ XML واستيفاء البيانات الوصفية لتحقيق تنفيذ الأوامر عن...

Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code execution

Summary The MediaBundle blocks dangerous upload extensions with a blacklist that was matched case-sensitively, while the stored filename was lowercased afterwards. A file uploaded as webshell.pHp therefore bypassed the blacklist and was written to the web-accessible upload directory as...

WordPress Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion vulnerability

Authenticated Subscriber+ PHP Object Injection to Arbitrary File Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Uncanny Automator versions = 7.6.1.1...

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — حقن قواعد التحقق في CodeIgniter 4 CVE-2023-32692 هي ثغرة حقن برمجي في إطار عمل PHP CodeIgniter 4، وتؤثر على الإصدارات من 4.0.0 حتى 4.3.4. تم إصلاحها في الإصدار 4.3.5 صدر في يونيو 2023. هذه بيئة تجريبية لمن يريد التجربة بها. يمكن العثور على تفاصيل الثغرة في مدونة MOGWAI LABS. بيئة...