Lucene search
+L

3788 matches found

Kitploit
Kitploit
added 2026/09/23 9:17 p.m.18 views

gophish

Fork de Gophish Este es un fork de Gophish: Toolkit de Phishing de Código Abierto Gophish Nuevas características Este fork se enfoca en ejecutar campañas de phishing reales para un solo cliente. Se añaden las siguientes características: Script para configurar automáticamente una instancia de...

6.2AI score
SaveExploits0References1
NVD
NVD
added 2026/09/23 8:17 a.m.7 views

CVE-2026-91797

Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened...

7.8CVSS0.00346EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.92 views

Atlassian Confluence Download Attachments - Remote Code Execution

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attachments to pages and / or blogs or to create a new space or a personal space or who has 'Admin' permissions for a space can exploit this pat...

9CVSS8.2AI score0.96837EPSS
SaveExploits10References5
Kitploit
Kitploit
added 2026/09/22 11:45 p.m.12 views

CVE-2025-57231

CVE-2025-57231 - Docmost 0.22.0 - Lectura arbitraria de archivos Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2025-57231. Descargo de responsabilidad Este proyecto se proporciona únicamente con fines educativos y para pruebas de seguridad autorizadas. No lo utilice cont...

5.9AI score0.0126EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/09/22 8:34 p.m.6 views

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

Summary A critical Confused Deputy Arbitrary File Read & Exfiltration vulnerability in the Atlassian MCP server Python allows an AI agent to exfiltrate sensitive host files and environment secrets. By providing absolute system paths to the attachments parameter of the updateissue tool, an agent c...

8.6CVSS5.9AI score0.00514EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/09/22 6:08 p.m.6 views

EUVD-2026-84741

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a caller-provided filepath to local file operations without restricting it to the workspace. A remote MCP caller with tool access ca...

8.3CVSS5.9AI score0.00474EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/21 5:43 p.m.6 views

CVE-2026-84642

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain...

3.4CVSS5.9AI score0.00254EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/20 10:39 p.m.12 views

CVE-2024-9756

🚀 Exploit de Subida Arbitraria de Archivos en WooCommerce CVE-2024-9756 📌 Resumen Este exploit aprovecha una vulnerabilidad de subida arbitraria de archivos no autorizada y limitada en el plugin Order Attachments for WooCommerce versiones 2.0 a 2.4.1 para WordPress. La vulnerabilidad permite a...

4.3CVSS5.9AI score0.0086EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 11:31 a.m.11 views

CVE-2025-66956

CVE-2025-66956 Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. CVSS Vectors CVSS 3.1: 9.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 4.0: 10.0,...

9.9CVSS6.1AI score0.00485EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 1:45 a.m.13 views

CVE-2026-29780

Path Traversal in Official Example Script Leading to Arbitrary File Write Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted fr...

5.5CVSS6.3AI score0.00237EPSS
SaveExploits1
NVD
NVD
added 2026/09/15 8:19 p.m.11 views

CVE-2026-87254

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

7.5CVSS0.00301EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 8:19 p.m.7 views

CVE-2026-87258

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

7.6CVSS0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 8:06 p.m.14 views

CVE-2026-87258

Oracle Agile PLM (Oracle Supply Chain) is affected in component Folders, Files & Attachments on supported version 9.3.6 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires human interaction from a user other than the att...

7.6CVSS5.7AI score0.00261EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/15 8:06 p.m.9 views

EUVD-2026-79911

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

7.6CVSS5.7AI score0.00261EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 8:06 p.m.9 views

EUVD-2026-79908

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

7.5CVSS5.7AI score0.00301EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 8:06 p.m.18 views

CVE-2026-87254

CVE-2026-87254 affects Oracle Agile PLM (product of Oracle Supply Chain), specifically the Folders, Files & Attachments component, in supported version 9.3.6 . The vulnerability is difficult to exploit but allows a low-privileged attacker with network access via HTTP (no user interaction required...

7.5CVSS5.7AI score0.00301EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/09/15 7:17 p.m.7 views

CVE-2026-68533

Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...

2.3CVSS0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 6:27 p.m.7 views

EUVD-2026-79144

Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...

2.3CVSS5.7AI score0.00286EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/15 12:00 a.m.14 views

PT-2026-93079

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

7.6CVSS5.7AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/15 12:00 a.m.16 views

PT-2026-93076

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

7.5CVSS5.7AI score0.00301EPSS
SaveExploits0References2
Rows per page
Query Builder