Lucene search
+L

49737 matches found

Nuclei
Nuclei
added 2026/09/10 4:50 a.m.18 views

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

8.5CVSS5.9AI score0.01541EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.66 views

Pichome 2.1.0 - Arbitrary File Read

A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed t...

6.9CVSS6.1AI score0.01628EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.77 views

Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. id: CVE-2021-46424 info: name: Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete author: gy741 severity:...

9.4CVSS8.1AI score0.36459EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.6 views

InvoicePlane <= 1.6.3 - Arbitrary File Read

InvoicePlane through 1.6.3 is vulnerable to an unauthenticated path traversal in the guest "Get::getfile" controller. The supplied filename is passed to readfile after a single urldecode with no directory-traversal validation, allowing an unauthenticated attacker to read files outside the...

9.3CVSS5.8AI score0.04108EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.202 views

ManageEngine OpManager - Directory Traversal

A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability. id: CVE-2023-47211 info: name: ManageEngine...

9.1CVSS8AI score0.47024EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.115 views

Gradio < 2.5.0 - Arbitrary File Read

Files on the host computer can be accessed from the Gradio interface id: CVE-2021-43831 info: name: Gradio 2.5.0 - Arbitrary File Read author: isacaya severity: high description: | Files on the host computer can be accessed from the Gradio interface impact: | An attacker would be able to view the...

7.7CVSS7.2AI score0.03794EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.41 views

DevDojo Voyager <=1.8.0 - Arbitrary File Read

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. id: CVE-2024-55415 info: name: DevDojo Voyager =1.8.0 - Arbitrary File Read author: iamnoooob,rootxharsh,pdresearch severity: high description: | DevDojo Voyager through 1.8.0 is vulnerable to path traversal at t...

5.7CVSS8.2AI score0.15543EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.34 views

WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle function hooked via the 'addbookingtype' route in all versions up to, and including, 1.0.4. id: CVE-2025-6058 info: name: WPBookit "; ifisset$GET"cmd" echo "";...

9.8CVSS5.8AI score0.05497EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.47 views

Zhiyuan OA Platform - Arbitrary File Upload

An arbitrary file upload vulnerability exists in the Zhiyuan OA platform 5.0, 5.1 - 5.6sp1, 6.0 - 6.1sp2, 7.0, 7.0sp1 - 7.1, 7.1sp1, and 8.0 - 8.0sp2 via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing...

10CVSS6.4AI score0.14813EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.29 views

Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to and including 1.7.1 via the templateredirect function. The plugin registers 'hippooserve' as a WordPress query variable and uses it to serve PWA files from the pwa/ directory. In...

7.5CVSS5.8AI score0.02213EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.38 views

esm.sh <= v136 - Arbitrary File Write via Path Traversal

esm.sh = 136 contains a path traversal caused by improper canonicalization of the X-Zone-Id HTTP header, letting attackers write files outside the intended storage directory, exploit requires crafted header input. id: CVE-2025-59342 info: name: esm.sh = v136 - Arbitrary File Write via Path...

6.9CVSS7.9AI score0.03031EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.53 views

Sangfor OSM - Arbitrary File Upload

Sangfor Operation and Maintenance Management System = 3.0.8 contains an unrestricted file upload vulnerability caused by manipulation of the "File" argument in /fort/trust/version/common/common.jsp, letting remote attackers upload arbitrary files, exploit requires no special privileges. id:...

9.8CVSS7.2AI score0.02066EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.184 views

Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

9.8CVSS6.9AI score0.7367EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.45 views

Avid NEXIS Agent - Arbitrary File Read

Avid NEXIS E-series, F-series, PRO+, and System Director Appliance SDA+ before 2025.5.1 contain an unauthenticated arbitrary file read caused by improper validation of the filename parameter, letting unauthenticated attackers read sensitive files, exploit requires no authentication. id:...

8.7CVSS8AI score0.01083EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.190 views

Camaleon CMS < 2.8.1 Arbitrary File Write to RCE

An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on depending on the permissions of the underlying filesystem. E.g. This can lead to a remote...

9.9CVSS6.3AI score0.40956EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.67 views

TinaCMS - Path Traversal

TinaCMS CLI 2.1.8 contains a file system read vulnerability caused by disabled Vite server.fs.strict setting, letting unauthenticated attackers read arbitrary files on the host system, exploit requires access to the dev server. id: CVE-2026-29066 info: name: TinaCMS - Path Traversal author:...

6.2CVSS5.9AI score0.01025EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.8 views

Feast Feature Server <=0.58.0 - Arbitrary File Read

Feast the open-source Feature Store Feature Server through 0.58.0 exposes an unauthenticated POST /read-document endpoint that reads an arbitrary, caller-supplied file path with no authentication and no path validation. The readdocumentendpoint handler passes the JSON filepath field straight to...

7.5CVSS5.8AI score0.01912EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.44 views

Adobe ColdFusion - RDS Arbitrary File Write

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary code execution in the context of the current user. The RDS FILEIO WRITE operation allows unauthenticated...

10CVSS8.6AI score0.42388EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.31 views

JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write

JoomShaper Helix3 template framework versions 1.0 through 3.1.0 for Joomla expose an unauthenticated AJAX handler plgajaxhelix3 accessible via the Joomla comajax component. The onAjaxHelix3 plugin method processes dataaction=save requests without any authentication check or CSRF token validation...

7.5CVSS5.9AI score0.00992EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.73 views

Blinko <= 1.8.3 - Path Traversal via /plugins

Blinko = 1.8.3 contains a path traversal caused by improper path concatenation without verification in the plugin file server endpoint, letting remote attackers access arbitrary files, exploit requires network access. id: CVE-2026-23483 info: name: Blinko = 1.8.3 - Path Traversal via /plugins...

6.9CVSS5.9AI score0.00771EPSS
SaveExploits0References2
Rows per page
Query Builder