4360 matches found
CVE-2024-45440
Herramienta de enumeración para CVE-2024-45440 por DividesByZer0 & c0d3Ninja CVE-2024-45440 - PoC de Divulgación de Ruta Completa en Drupal 11.x-dev opciones: -h, --help muestra este mensaje de ayuda y sale -u URL, --url URL URL única para escanear. -f FILE, --file FILE Archivo que contiene URLs...
WPintel
Características • Instalación • Uso • Licencia • Descargar Demostración en video Características Detectar versión de WordPress Detectar vulnerabilidades de versión Enumerar usuarios Detectar temas Detectar plugins Encontrar divulgación de ruta completa Verificar estado de registro de usuario...
CVE-2026-37069
CVE-2026-37069 Divulgación de Ruta Absoluta en /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado conocer en qué directorio del sistema se está ejecutando el código de la aplicación enviando una petició...
Langflow < 1.9.1 - Unauthenticated File Upload
Langflow 1.9.1 contains an unrestricted file upload caused by lack of upload limitations, letting unauthenticated attackers exhaust server space and leak absolute file paths, exploit requires network access. id: CVE-2026-55450 info: name: Langflow 1.9.1 - Unauthenticated File Upload author: xtr0n...
CouchCMS <= 2.0 - Path Disclosure
CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...
Drupal 11.x-dev - Full Path Disclosure
core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. id: CVE-2024-45440 info: name: Drupal 11.x-dev - Full Path Disclosure author: DhiyaneshDK severity: medium description: |...
CirCarLife <4.3 - Improper Authentication
CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...
DedeCMS 5.7 - Path Disclosure
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php id: CVE-2018-6910 info: name: DedeCMS 5.7 - Path Disclosure author: pikpikcu severity: high description: DedeCMS 5.7 allows remote attackers to discover t...
Campaign Monitor for WordPress - Information Disclosure
Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...
WP Popups - Information Disclosure
WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiledetect without access restrictions, letting unauthenticated attackers retrieve server paths, exploit requires no specific conditions. id: CVE-2024-6555 info: name: WP Popups - Informatio...
emlog 5.3.1 Path Disclosure
emlog v5.3.1 is susceptible to full path disclosure via t/index.php, which allows an attacker to see the path to the webroot/file. id: CVE-2021-3293 info: name: emlog 5.3.1 Path Disclosure author: h1ei1 severity: medium description: emlog v5.3.1 is susceptible to full path disclosure via...
wphunter
WPHunter Tool ☣ WPHunter A Wordpress Vulnerability Scanner You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run on WordPress. which is now powers 26% of the Web. Remarkably enough thousands...
CVE-2001-0934
CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...
CVE-2024-45440
CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php en Drupal 11.x-dev permite la divulgación de la ruta completa incluso cuando el registro de errores está en None si el valor de hashsalt es el resultado de filegetcontents de un archivo que no existe. Uso root@kitploit: python...
CVE-2024-5735
CVE-2024-5735 AdmirorFrames Joomla! Extension params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR;...
CVE-2026-89248
AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) is affected by an information disclosure in the WebRTC plugin file plugin/WebRTC/status.json.php. The endpoint performs no authentication or authorization check (no User::isLogged(), User::isAdmin(), or forbiddenPage()), allowing an...
CVE-2025-6082
CVE-2025-6082 PoC de Divulgación de Ruta Completa Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilidad : Divulgación de Ruta Completa CWE-200 Descripción Este PoC explota un fallo de Divulgación de Ruta Completa en el plugin de WordPress Birth Chart Compatibility version...
CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure
CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - Aviso 06 - 25/02/05 Programa: phpBB 2.0.12 Página web: http://www.phpbb.com Versiones vulnerables: phpBB 2.0.12 y versiones inferiores Riesgo: Bajo Riesgo!! Impacto: Revelación de ruta completa root@kitploit: -==phpBB 2.0.12...
AWStats <= 7.5 - Full Path Disclosure
AWStats 7.6 contains a full path disclosure caused by improper handling of framename and update parameters in awstats.pl, letting remote attackers determine server file paths, exploit requires sending crafted parameters. id: CVE-2018-10245 info: name: AWStats = 7.5 - Full Path Disclosure author:...
