CVE-2025-8088

CVE-2025-8088 Python tool for safe archive handling, path traversal awareness, and secure extraction. Inspired by CVE-2025-8088. Safe Archive Handling PoC Educational blue-team tool inspired by path traversal issues such as CVE-2025-8088. This script helps detect and safely handle dangerous archi...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit | || | \ / / | / | | | | Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS Exploitation -...

evilarc

evilarc 목적 evilarc를 사용하면 포함된 경로에 디렉터리 트래버설 문자가 있는 파일이 포함된 zip 파일을 만들 수 있습니다. 대부분의 상용 zip 프로그램winzip 등은 포함된 파일의 경로에 디렉터리 트래버설 문자가 포함된 zip 파일의 압축 해제를 차단합니다. 그러나 많은 소프트웨어 개발 라이브러리에는 이러한 보호 메커니즘이 포함되어 있지 않습니다예: Java, PHP 등. 프로그램 및/또는 라이브러리가 디렉터리 트래버설 문자를 차단하지 않는다면, evilarc를 사용하여 압축 해제 시 대상 시스템의 임의 위치...

CVE-2026-102266 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

CVE-2026-102269 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

CVE-2026-101917 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-9V7F-9G4P-FFGJ vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-FFC3-869F-JXW9 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

CVE-2026-102267 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

GHSA-2GX3-RCP4-G85Q vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, authentik-fips, openstack-glance-2025.2-fips, openstack-placement-2026.1-fips, openstack-manila-2026.1, superset, openstack-octavia-2025.2, openstack-placement-2025.1, datadog-agent-fips, openstack-heat-2025.2, datadog-agent, open-webui...

CVE-2026-103230

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection...

CVE-2026-103230 AdithyaYelloju Restaurant-Management-System Order Placement ord.php mysqli_query sql injection

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection...

CVE-2026-103230

The AdithyaYelloju Restaurant-Management-System is vulnerable to a remote SQL injection in the Order Placement component. The flaw resides in the mysqli_query function within the User/ord.php file. An attacker can exploit this by manipulating the id/name arguments to execute unauthorized queries....

CVE-2026-103230 AdithyaYelloju Restaurant-Management-System Order Placement ord.php mysqli_query sql injection

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection...

EUVD-2026-90026

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection...

CVE-2024-50379

CVE-2024-50379 CVE-2024-50379 Exploit CVE-2024-50379.py and upload.txt are in the same directory The upload content is the webshell Here, the upload content generates a 2.jsp file You can use 2.jsp to create a new 4.jsp, the original Behinder webshell...

CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Description This exploit demonstrates an Unrestricted file upload vulnerability in Chamilo-LMS. The vulnerability affects the big file upload functionality located at: /main/inc/lib/javascript/bigupload/inc/bigUpload.php Affected Versions : Chamilo LMS = v1.11.24...

gxdlmsdirector-cve

Multiple vulnerabilities in Gurux GXDLMS Director – remote code execution Gurux GXDLMS Director is an open-source Windows program for interacting with energy meters through the use of DLMS/COSEM protocol. The software has a remote update functionality for add-in DLLs as well as for files containi...