Lucene search
+L

225936 matches found

Nuclei
Nuclei
added 2026/08/23 2:28 a.m.70 views

WordPress Sniplets 1.1.2 - Local File Inclusion

PHP remote file inclusion vulnerability in modules/syntaxhighlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter. id: CVE-2008-1059 info: name: WordPress Sniplets 1.1.2 - Local File Inclusion autho...

7.5CVSS5.9AI score0.48329EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.64 views

WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal

A directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the dewfile parameter. id: CVE-2013-7240 info: name: WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal author...

5CVSS8.9AI score0.19641EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.50 views

WordPress Church Admin <0.810 - Cross-Site Scripting

WordPress Church Admin plugin before 0.810 allows remote attackers to inject arbitrary web script or HTML via the address parameter via index.php/2015/05/21/churchadmin-registration-form/. id: CVE-2015-4127 info: name: WordPress Church Admin 0.810 - Cross-Site Scripting author: daffainfo severity...

4.3CVSS5.5AI score0.07495EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.66 views

Atlassian Confluence <5.8.17 - Information Disclosure

Atlassian Confluence before 5.8.17 contains an information disclsoure vulnerability. A remote authenticated user can read configuration files via the decoratorName parameter to 1 spaces/viewdefaultdecorator.action or 2 admin/viewdefaultdecorator.action. id: CVE-2015-8399 info: name: Atlassian...

4.3CVSS4.8AI score0.61114EPSS
SaveExploits5References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.48 views

PHPGurukul Hospital Management System - Cross-Site Scripting

PHPGurukul Hospital Management System in PHP 4.0 contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2020-5191 info: name: PHPGurukul Hospital Management System -...

6.1CVSS6.2AI score0.0552EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.62 views

Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion

Joomla! Omilen Photo Gallery comomphotogallery component Beta 0.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php. id: CVE-2009-4202 info: name: Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion...

7.5CVSS5.6AI score0.08109EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.58 views

PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in...

9.8CVSS7.4AI score0.15652EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.53 views

D-Link DVG-N5402SP - Local File Inclusion

D-Link DVG-N5402SP is susceptible to local file inclusion in products with firmware W1000CN-00, W1000CN-03, or W2000EN-00. A remote attacker can read sensitive information via a .. dot dot in the errorpage parameter. id: CVE-2015-7245 info: name: D-Link DVG-N5402SP - Local File Inclusion author:...

7.5CVSS7.7AI score0.45479EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.51 views

NewStatPress <0.9.9 - Cross-Site Scripting

WordPress NewStatPress plugin before 0.9.9 contains a cross-site scripting vulnerability in includes/nspsearch.php. The plugin allows remote authenticated users to inject arbitrary web script or HTML via the where1 parameter in the nspsearch page to wp-admin/admin.php. id: CVE-2015-4063 info: nam...

3.5CVSS5.2AI score0.06188EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.52 views

WordPress Plugin DukaPress 2.5.2 - Directory Traversal

A directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php. id: CVE-2014-8799 info: name: WordPress Plugin...

5CVSS8.9AI score0.67631EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.58 views

WordPress RobotCPA 5 - Directory Traversal

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. id: CVE-2015-9480 info: name: WordPress RobotCPA 5 - Directory Traversal author: daffainfo severity: high description: The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter...

7.5CVSS7.9AI score0.12736EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.45 views

Joomla! ProDesk 1.0/1.2 - Local File Inclusion

Joomla! Pro Desk Support Center comprodesk component 1.0 and 1.2 allows remote attackers to read arbitrary files via a .. dot dot in the includefile parameter to index.php. id: CVE-2008-6222 info: name: Joomla! ProDesk 1.0/1.2 - Local File Inclusion author: daffainfo severity: medium description:...

5CVSS5.5AI score0.11497EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.224 views

Seagate BlackArmor NAS - Command Injection

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php. id: CVE-2014-3206 info: name: Seagate BlackArmor NAS - Command Injection author: gy741...

10CVSS9.3AI score0.51014EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.49 views

WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting

WordPress plugin Infusionsoft 1.5.11 and before contains a reflected cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

6.1CVSS6.1AI score0.04195EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.68 views

Cobbler 'XML-RPC' - Authentication Bypass

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

9.8CVSS8.4AI score0.03948EPSS
SaveExploits6References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.52 views

rConfig 3.9.4 - Server-Side Request Forgery

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery SSRF via the path parameter at /ajaxGetFileByPath.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. id: CVE-2023-39110 info: name: rConfig 3.9.4 - Server-Side...

8.8CVSS8.3AI score0.03651EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.86 views

Camtron CMNC-200 IP Camera - Directory Traversal

The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system. id: CVE-2010-4231 info: name: Camtron CMNC-200 IP Camera - Directory Traversal author: daffainfo severity: high description: The CMNC-200 IP...

7.8CVSS8.7AI score0.1633EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.57 views

Joomla! Component Music Manager - Local File Inclusion

A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. id: CVE-2010-2857 info: name: Joomla! Component Music Manager - Local Fil...

6.8CVSS5.8AI score0.04848EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.30 views

Joomla! Component Fabrik 2.0 - Local File Inclusion

A directory traversal vulnerability in the Fabrik comfabrik component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1981 info: name: Joomla! Component Fabrik 2.0 - Local File Inclusion author: daffainfo...

6.8CVSS5.6AI score0.11864EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.30 views

Joomla! Component JA Comment - Local File Inclusion

A directory traversal vulnerability in the JA Comment comjacomment component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1601 info: name: Joomla! Component JA Comment - Local File Inclusion author: daffainfo severit...

5CVSS5.5AI score0.15974EPSS
SaveExploits2References5
Rows per page
Query Builder