Lucene search
+L

7085 matches found

Nuclei
Nuclei
added 2026/09/17 2:05 a.m.192 views

Camaleon CMS < 2.8.1 Arbitrary File Write to RCE

An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on depending on the permissions of the underlying filesystem. E.g. This can lead to a remote...

9.9CVSS6.3AI score0.40956EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.36 views

YouPHPTube Encoder - Arbitrary File Write

Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube.The parameter base64Url in /objects/getImageMP4.php is vulnerable to a command injection attack. id: CVE-2019-5128 info: name: YouPHPTube Encoder - Arbitrary...

10CVSS8.2AI score0.30174EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/17 1:45 a.m.13 views

CVE-2026-29780

Path Traversal in Official Example Script Leading to Arbitrary File Write Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted fr...

5.5CVSS6.2AI score0.00237EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 1:42 a.m.8 views

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

8.8CVSS6.6AI score0.36141EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/17 1:05 a.m.12 views

cve-2026-21440-writeup-poc

cve-2026-21440 path traversal to arbitrary file write in @adonisjs/bodyparser overview a critical path traversal vulnerability exists in the @adonisjs/bodyparser package that allows remote attackers to write arbitrary files outside the intended upload directory. when the multipartfile.move functi...

9.2CVSS8.7AI score0.01049EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 12:54 a.m.13 views

zimaos-cve-2026-28286-arbitrary-file-write

🚨 CVE-2026-28286 — ZimaOS Arbitrary File Write From API Misconfiguration → Arbitrary File Write → Potential System Compromise ⚡ TL;DR Endpoint: /v21/files/file Issue: No path validation Impact: Arbitrary file write outside the intended directory Severity: 🔴 Critical 🧪 Quick Start root@kitploit: g...

9.9CVSS6AI score0.0041EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 12:52 a.m.13 views

CVE-2024-54910

CVE-2024-54910 https://vulners.com/cve/CVE-2024-54910 This document explores a vulnerability that allows arbitrary file writes, leading to privilege escalation on a Windows System that has Hasleo Backup Suite Free = 4.9.4 installed. It demonstrates how backup recovery operations, combined with...

4.7CVSS6AI score0.00407EPSS
SaveExploits0
NVD
NVD
added 2026/09/16 9:17 p.m.8 views

CVE-2026-92748

BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths on the C2 server. Attackers can use path traversal sequences in the filename to bypass directory containment and write malicio...

8.8CVSS0.00658EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/16 8:58 p.m.11 views

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup Restore Arbitrary File Write Vulnerability Summary A critical arbitrary file write vulnerability exists in the backup restoration functionality of Halo CMS versions up to 2.25.4. The restoreWorkdir method in MigrationServiceImpl.java copies the workdir/ directory from a...

8.8CVSS5.8AI score0.0065EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/16 8:33 p.m.7 views

EUVD-2026-81074

ComfyUI before 0.30.0 fails to sanitize foldername input in dataset save nodes, allowing attackers to write files to arbitrary paths outside the output directory. Attackers can load a crafted workflow that writes attacker-controlled content to arbitrary locations, enabling code execution through...

8.5CVSS0.00156EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/16 8:20 p.m.9 views

EUVD-2026-81156

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to write arbitrary files on an affected device. This vulnerability exists because the affected software does not properly validat...

4.9CVSS0.0088EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:20 p.m.13 views

CVE-2026-76432

A directory traversal vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC allows an authenticated, remote attacker with administrative-level privileges to write arbitrary files to any location on the affected system. The root cause is insufficient validation of dire...

4.9CVSS0.0088EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/16 8:17 p.m.9 views

CVE-2026-89084

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

8.8CVSS0.00577EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/16 8:17 p.m.7 views

CVE-2026-89082

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

9.3CVSS0.00506EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/16 8:17 p.m.8 views

CVE-2026-89083

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

9.3CVSS0.00506EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 8:06 p.m.7 views

EUVD-2026-81103

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has incorrect permissions t...

9.9CVSS0.0044EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 8:06 p.m.48 views

CVE-2026-20324

CVE-2026-20324 is a CRITICAL (CVSS 9.9) vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software . The root cause is that a registered sftunnel peer holds incorrect permissions, allowing it to write an arbitrary file to any locati...

9.9CVSS0.0044EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 8:05 p.m.18 views

CVE-2026-58073-check

Veeam Service Provider Console Agent Impersonation — Patch-State Detection Script A safe, unauthenticated detector for the KB4893 vulnerabilities in Veeam Service Provider Console published 2026-08-04. It answers one question per target, before any authentication or TLS: are the KB4893 fixes...

9.5CVSS6.7AI score0.00474EPSS
SaveExploits1
CVE
CVE
added 2026/09/16 7:54 p.m.15 views

CVE-2026-89084

HP Advance software is affected by potential vulnerabilities that may enable elevation of privilege , remote code execution , or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. The CVSS 4.0 base score is 8.8 (HIGH) , with a network attack vecto...

8.8CVSS0.00577EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 7:54 p.m.6 views

EUVD-2026-81091

HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software...

8.8CVSS0.00577EPSS
SaveExploits0References1
Rows per page
Query Builder