Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete

Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. id: CVE-2021-46424 info: name: Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete author: gy741 severity:...

OpenAPI Generator <= 7.5.0 - Arbitrary File Read/Delete

OpenAPI Generator versions 7.5.0 and below are prone to an Arbitrary File Read/Delete vulnerability. Attackers can exploit this vulnerability to read and delete files and folders from an arbitrary, writable directory. id: CVE-2024-35219 info: name: OpenAPI Generator = 7.5.0 - Arbitrary File...

Meta Box <= 4.16.2 - Arbitrary File Deletion

The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion in the ajaxdeletefile function. The function accepts any attachmentid from the POST request and directly calls wpdeleteattachment or unlink without validating that the attachment belongs to the specified Meta Box field,...

chromecookiestealer

Chrome Cookie Stealer and injector Attaches to Chrome using its Remote DevTools protocol and steals/injects/clears/deletes cookies. Heavily inspired by WhiteChocolateMacademiaNut. Cookies are dumped as JSON objects using Chrome's own format. The same format is used for cookies to be loaded. For...

CVE-2024-2432-PaloAlto-GlobalProtect-EoP

CVE-2024-2432 Palo Alto GlobalProtect EoP Windows 시스템에서 GlobalProtect앱 버전 6.1.1-5 및 6.2.0-89가 심볼릭 링크 공격을 통해 상승된 권한으로 임의 파일 삭제에 취약하며, 이로 인해 로컬 머신에서 로컬 권한 상승으로 이어질 수 있음이 발견되었습니다. Windows 비권한 사용자가 GlobalProtect로 VPN 연결을 시도하면 "PanGpHip.exe" 프로세스가 SYSTEM 권한으로 다음 작업을 수행하는 것이 관찰되었습니다: 1...

delete-self-poc

🗑️ delete-self-poc delete-self-poc は、ロックされた実行可能ファイルや現在実行中のファイルをディスクから削除する方法のデモンストレーションです。この概念は当初 Jonas Lykkegaard によって発見され、私はそのための概念実証 POC を作成しました。さらに、現在の呼び出し元プロセスがそれらにアクセスして削除するために必要な権限を持っている場合、ディスク上のロックされたファイルを削除するためにも使用できます。 では、この POC はどのように機能するのでしょうか？ 1. 現在実行中のプロセスへの HANDLE を DELETE...

EUVD-2026-92043

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-0603

CVE-2026-0603 Hibernate ORM インジェクション / 二次 SQL インジェクション ★ CVE-2026-0603 Hibernate SQL インジェクション PoC ★ https://github.com/user-attachments/assets/2e7c3a89-e26f-48cd-af0b-8b82d32ce71f 概要 CVE-2026-0603 は、広く使用されている Java ORM フレームワークである Hibernate ORM における 二次 SQL インジェクション の脆弱性です。 悪意のある SQL...

CVE-2025-34157

Coolify 삭제 흐름에서의 저장형 XSS CVE-2025-34157 영향 받는 버전: Coolify ≤ v4.0.0-beta.420.6 수정된 버전: v4.0.0-beta.420.7 심각도: 심각 9.4 CVSS 4.0 벡터: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 크로스 사이트 스크립팅, CWE-20 부적절한 입력 검증 요약 프로젝트 삭제 흐름의 저장형 XSS를 통해, 낮은 권한의 사용자가 만든 프로젝트를 관리자가 삭제하려고 ...

firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

CVE-2026-105123

The W (vincent-peugnet/wcms) content management system, version through 3.18.0 , is vulnerable to Remote Code Execution (RCE) and Arbitrary File Write via the Media Upload API. The root cause is an unvalidated path in the POST /api/v0/media/upload/[*:path] endpoint. Authenticated editors can expl...

CVE-2025-21420_POC

cleanmgr.exe 디핑 새로운 버전의 cleanmgr.exe에는 SetProcessMitigationPolicy 함수 호출이 포함되어 있습니다. MitigationPolicy가 16으로 설정되어 있으며, 이는 ProcessRedirectionTrustPolicy 에 해당합니다. Microsoft의 CWE-59: 파일 액세스 전 부적절한 링크 확인'Link Following' 설명과 함께 보면, cleanmgr.exe에 Redirection Guard가 활성화되어 있음을 추론할 수 있습니다. Simon Zuckerbraun...

cve-2026-75157-poc

CVE-2026-75157 PoC Apache Airflow 3.3.2 より前のバージョンにおける queued-events 認可の脆弱性に関する、許可されたセキュリティ研究用 PoC。 スコープ 自身が所有する、または明示的にテストを許可された Airflow インスタンスに対してのみ実行すること。デフォルトのランナーは非ループバックのターゲットを拒否する。このリポジトリには、スキャン、ターゲット列挙、永続化、認証情報の窃取、破壊的なペイロードロジックは含まれていない。 ファイル README.md poc.py poc.py は、ターゲットを認識する汎用的な HTTP...

s3sec

s3sec AWS S3 버킷의 읽기/쓰기/삭제 접근 권한 테스트 이 도구는 버그 바운티 프로그램의 침투 테스트 목적으로 S3 버킷 목록에서 공개 읽기, 쓰기 및 삭제 접근을 신속하게 테스트하기 위해 개발되었습니다. Screenshot 이 도구를 사용하여 버그 바운티를 발견하셨나요? 자유롭게 저를 협력자로 추가해 주세요: @0xmoot : 설치 Git 리포지토리를 자신의 머신에 클론하세요: git clone https://github.com/0xmoot/s3sec 즐거운 사냥 되세요 : 사용법 단일 S3 인스턴스 확인: echo...

s3sec

s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...

EUVD-2026-92016

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alerting subsystem. Attackers can concurrently call the notification-group and batch-delete endpoints with oversized id lists to widen the race a...

CVE-2019-14529

CVE-2019-14529 OpenEMR 프로젝트의 다중 SQL 인젝션 취약점 취약한 함수 파일: /openemr/interface/forms/eyemag/save.php 조건 : 인증된 모든 사용자 취약한 버전: 5.0.2, 5.0.2 버전에서 수정됨. 설명 두 가지 함수가 있습니다: 1. "storePDF", 필터링되지 않은 변수 "encounter", 2. "canvas", 필터링되지 않은 두 변수 "encounter"와 "zone". 두 함수 모두 이 변수들을 필터링 없이 DELETE SQL 쿼리에 사용합니다. 두 변수...

CVE-2026-94505

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-94505 Nelio Content <= 4.5.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Reusable Message Deletion via 'id' Parameter

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...