CVE-2025-6220

Ultimate Addons per Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

CVE-2025-5961

CVE-2025-5961 Migrazione, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...

CVE-2025-4336

eMagicOne Store Manager per WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group...

CVE-2024-27460

CVE-2024-27460 HP Plantronics Hub 3.25.1 Atualizador - Escalação de Privilégios/Leitura Arbitrária de Arquivos Descrição: O HP Plantronics Hub 3.25.1 sofre de um bug que permite que usuários com baixos privilégios realizem leitura arbitrária de arquivos como SYSTEM na máquina onde o aplicativo es...

winboxPOC

WinboxExploit Questa è una prova di concetto della vulnerabilità critica WinBox CVE-2018-14847 che consente la lettura arbitraria di file contenenti password in chiaro. Requisiti Python 3+ Questo script NON funzionerà con Python 2.x o versioni inferiori. Come Usare Lo script è semplice e si usa c...

day04-nexus-4956

Tag 4 – Nexus Repository 3 Path Traversal CVE-2024-4956 Was: Nicht authentifizierter Path-Traversal-Angriff ermöglicht es jedem, mit einer manipulierten URL beliebige Dateien herunterzuladen. Schwachstelle: Betrifft Nexus Repo 3 Versionen ≤ 3.68.0. Behoben in 3.68.1. Quelle: Sonatype Advisory +...

CVE-2023-39115

CVE-2023-39115 Descrição: O Campcodes Online Matrimonial Website System Script v3.3 é vulnerável a uma vulnerabilidade de upload de arquivo arbitrário, potencialmente permitindo que atacantes executem código arbitrário no servidor alvo. A vulnerabilidade surge de validação insuficiente de arquivo...

CVE-2022-32060

Snipe-IT Versione v6.0.2 Spiegazione della vulnerabilità: Una vulnerabilità di upload arbitrario di file nel componente Update Branding Settings di Snipe-IT v6.0.2 consente agli attaccanti di eseguire codice arbitrario tramite un file appositamente predisposto. Vettori di attacco: Abbiamo trovato...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Caricamento Arbitrario di File Non Autenticato Descrizione Il plugin WooCommerce Designer Pro per WordPress, utilizzato dal tema WordPress Pricom - Printing Company & Design Services, è vulnerabile a caricamenti arbitrari di file a causa della...

cve-2016-10924-POC

CVE-2016-10924-POC Questo repository contiene uno script exploit Proof-of-Concept PoC per la vulnerabilità di Directory Traversal CVE-2016-10924 trovata nel plugin WordPress ebook-download versioni Nota: Questo PoC è solo per scopi educativi e di test autorizzati. L'uso improprio di queste...

PoC-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path-Traversal-Exploit Ein Python-Exploit für CVE-2021-41773, eine Path-Traversal-Sicherheitslücke in Apache HTTP Server 2.4.49, die das Lesen beliebiger Dateien vom Server ermöglicht. Schwachstellendetails CVE-2021-41773 ist eine Path-Traversal-Sicherheitslücke ...

DEBIAN-CVE-2026-78678

GitPython versions before 3.1.59 contain an incomplete denylist in the unsafegitrevisionoptions guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame. Attackers can supply revision values like --contents=/etc/passwd to leak...

CVE-2026-78679

GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message...

CVE-2026-78678

GitPython versions before 3.1.59 contain an incomplete denylist in the unsafegitrevisionoptions guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing these options to Repo.blame. Attackers can supply revision values like --contents=/etc/passwd to leak...

DEBIAN-CVE-2026-78679

GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create where a positional reference parameter bypasses the unsafe option guard. Attackers can supply a reference value like --file= to read arbitrary files, with contents returned in the annotated tag message...

CVE-2026-72695

Grav before 2.0.16 contains a path traversal vulnerability in MediaUploadTrait::deleteFile that allows authenticated users with media management permissions to delete arbitrary files by supplying filenames with directory traversal sequences. The method validates only the basename portion of the...

DEBIAN-CVE-2026-34967

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled conte...

CVE-2026-34968

Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db parameter to delete any files writable by the P...

CVE-2026-34967

Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled conte...

DEBIAN-CVE-2026-34968

Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db parameter to delete any files writable by the P...