Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

CVE-2024-54374

CVE-2024-54374 Sogrid = 1.5.6 - 未认证的本地文件包含 描述 WordPress 的 Sogrid 插件在 1.5.6 及更早版本中容易受到本地文件包含漏洞的影响。这使得未认证的攻击者能够在服务器上包含并执行任意文件，从而执行这些文件中的任何 PHP 代码。在可以上传并包含图片及其他“安全”文件类型的情况下，此漏洞可被用于绕过访问控制、获取敏感数据或实现代码执行。 详情 类型 ：插件 标识 ：sogrid 受影响版本 ：1.5.6 CVSS 分数 ：9.8 CVSS 评级 ：严重 CVSS 向量...

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ CVE-2025-8088 WinRAR 漏洞利用工具 ☠️ 系统访问：已授权 目标：WINRAR 漏洞 一款精密、军事级 GUI 工具，专用于创建恶意 RAR 压缩包，利用 WinRAR 路径遍历漏洞（CVE-2025-8088）。该工具利用先进的 NTFS 备用数据流（ADS）和 RAR5 头部操作来绕过安全控制机制。 ⚡ 系统能力 + ADS 隐身技术 ：利用 NTFS 备用数据流隐藏载荷。 + 头部注入 ：直接操作 RAR5 头部以实现精确的路径遍历。 + 自动持久化 ：自动针对 Windows 启动项部署以实现持久化。 + 诱饵操作 ：支持自定义诱饵文件以保持隐蔽性。 🛠️...

CVE-2021-23394

elFinder CVE-2021-23394 再現セットアップ このリポジトリには、CVE-2021-23394 （elFinderの任意ファイル実行）の再現セットアップをDockerで提供します。脆弱なバージョンと修正済みバージョンをApacheとNginxで比較する4つの環境を構築します。 概要 セットアップには以下が含まれます： 1. Apache 脆弱版 （ポート 8080）：elFinder 2.1.57 on Apache 2. Apache 修正版 （ポート 8081）：elFinder 2.1.66 on Apache 3. Nginx 脆弱版 （ポート...

CVE-2026-52876

Streambert is a cross-platform Electron desktop application for streaming and downloading video content. Prior to version 2.6.0 , the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. When mpv or VLC launch attempts ...

CVE-2026-52876 Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback

Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js accepts a renderer-controlled filePath without validating its type or location. If the mpv or VLC launch attempts are skipped or...

Command Injection

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Command Injection in the DevTools embedder handler. An attacker can execute arbitrary files outside the...

EUVD-2025-210497

An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal...

CVE-2026-56352 n8n - Arbitrary File Read and Execution via ExecuteWorkflow localFile Parameter

n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the file-access checks enforced by other file-reading nodes. Although hidden from the UI since v1.2, it remains reachable via the RE...

PT-2026-57381

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.1 via the get type template function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute...

CVE-2026-13080 WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.12.7 via the 'logKey' parameter parameter. This makes it possible for authenticated attackers, with administrator-leve...

Malicious code in cpu-optimizers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f82b75da107c50f4d2f3cf5587e7db58a0dc91b77f8511226ff9219623dc145a Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...

Malicious code in hiveos (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 632c5c53f72df87d7b0d9843df212e147e729699ffe5e7f6c20e3cd41fa13f64 Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...

EUVD-2026-17026

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to override workspace boundaries by supplying attacker-controlled spawnedBy and workspaceDir values. Remote operators can escape the...

CVE-2026-33573

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to override workspace boundaries by supplying attacker-controlled spawnedBy and workspaceDir values. Remote operators can escape the...

CVE-2026-2448 Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locatetemplate function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary fil...

Mattermost Desktop App 安全漏洞

The Mattermost Desktop App is a desktop application for message communication developed by the American company Mattermost. Versions 6.0, 6.2.0, and 5.2.13.0 of the Mattermost Desktop App have security vulnerabilities. These vulnerabilities stem from unvalidated help links, which could allow...

CVE-2026-24895 FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files

FrankenPHP is a modern application server for PHP. Prior to 1.11.2, FrankenPHP’s CGI path splitting logic improperly handles Unicode characters during case conversion. The logic computes the split index for finding .php on a lowercased copy of the request path but applies that byte index to the...

CVE-2026-24895

FrankenPHP CGI path splitting bug before 1.11.2 uses lowercased path for split index and applies it to the original path, causing SCRIPT_NAME/SCRIPT_FILENAME to point to the wrong file and potentially execute an unintended file. Root cause: Go strings.ToLower can increase byte length for certain ...

CVE-2026-24895 FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files

FrankenPHP is a modern application server for PHP. Prior to 1.11.2, FrankenPHP’s CGI path splitting logic improperly handles Unicode characters during case conversion. The logic computes the split index for finding .php on a lowercased copy of the request path but applies that byte index to the...