CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit | || | \ / / | / | | | | Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation -...

CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Description This exploit demonstrates an Unrestricted file upload vulnerability in Chamilo-LMS. The vulnerability affects the big file upload functionality located at: /main/inc/lib/javascript/bigupload/inc/bigUpload.php Affected Versions : Chamilo LMS = v1.11.24...

gxdlmsdirector-cve

Multiple vulnerabilities in Gurux GXDLMS Director – remote code execution Gurux GXDLMS Director is an open-source Windows program for interacting with energy meters through the use of DLMS/COSEM protocol. The software has a remote update functionality for add-in DLLs as well as for files containi...

CVE-2025-8088

CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 Exploit CVE-2024-50379.py and upload.txt are in the same directory The upload content is the webshell Here, the upload content generates a 2.jsp file You can use 2.jsp to create a new 4.jsp, the original Behinder webshell...

Kwetsbaarheid verholpen in BeyondTrust Remote Support

BeyondTrust has discovered a critical vulnerability in BeyondTrust Remote Support. This vulnerability, identified as CVE-2026-102764, has a CVSS score of 9.3. It involves insufficient validation of the origin of messages within the product’s internal components. As a result, a malicious actor...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: authenticatesn – Do not place hiseq at the end of dst for out-of-place decryption When decrypting data that is not in-place src != dst, there is no need to save the high-order sequence bits in dst, as the data can simply ...

EUVD-2026-100859

The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.14 does not verify that a user owns or may write to the album an upload is assigned to, allowing users with a subscriber-level account or above to place media into another user's private album and have it attributed to...

evilarc

evilarc Zweck Mit evilarc können Sie eine ZIP-Datei erstellen, die Dateien mit Directory-Traversal-Zeichen in ihrem eingebetteten Pfad enthält. Die meisten kommerziellen ZIP-Programme winzip usw. verhindern die Extraktion von ZIP-Dateien, deren eingebettete Dateien Pfade mit...

CVE-2026-107205 LMCache through 0.5.5 Missing Authentication in MP Coordinator Fleet Control API

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

EUVD-2026-94384

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

CVE-2026-107205

Versions of LMCache through 0.5.5 are vulnerable to a missing authentication flaw in the multiprocess coordinator. The vulnerability allows remote unauthenticated attackers to access the HTTP fleet control API, which listens on all interfaces by default. Exploitation of these endpoints enables at...

CVE-2026-107205: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

CVE-2026-102275 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.2-fips, datadog-agent, openstack-glance-2025.1-fips, openstack-placement-2026.1-fips, wazuh-manager-fips, datahub-ingestion-fips, kserve-huggingfaceserver-cuda-13.3, openstack-placement-2025.1-fips, datadog-agent-fips,...

GHSA-X33G-CR3X-6449 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.2-fips, datadog-agent, openstack-glance-2025.1-fips, openstack-placement-2026.1-fips, wazuh-manager-fips, datahub-ingestion-fips, kserve-huggingfaceserver-cuda-13.3, openstack-placement-2025.1-fips, datadog-agent-fips,...

GHSA-5639-2J2P-M4MX vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.2-fips, jupyterhub-k8s-singleuser-sample, openstack-manila-2026.1, openstack-glance-2025.1-fips, openstack-glance-2026.1, openstack-placement-2026.1-fips, openstack-octavia-2026.1, openstack-manila-2025.2, openstack-tempest-2025.1, superset,...

CVE-2026-102991 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.2-fips, jupyterhub-k8s-singleuser-sample, openstack-manila-2026.1, openstack-glance-2025.1-fips, openstack-glance-2026.1, openstack-placement-2026.1-fips, openstack-octavia-2026.1, openstack-manila-2025.2, openstack-tempest-2025.1, superset,...

EUVD-2026-92292

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...

CVE-2026-102266 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.2-fips, datadog-agent, openstack-manila-2026.1, openstack-glance-2025.1-fips, openstack-placement-2026.1-fips, openstack-octavia-2026.1, openstack-manila-2025.2, superset, openstack-glance-2026.1-fips, metaflow-service-fips, open-webui,...

CVE-2026-102269 vulnerabilities

Vulnerabilities for packages: openstack-placement-2025.2-fips, datadog-agent, openstack-manila-2026.1, openstack-glance-2025.1-fips, openstack-placement-2026.1-fips, openstack-octavia-2026.1, openstack-manila-2025.2, superset, openstack-glance-2026.1-fips, metaflow-service-fips, open-webui,...