Lucene search
+L

42675 matches found

Cvelist
Cvelist
added yesterday10 views

CVE-2026-62680 Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.22.0, Orval resolves remote and local external $ref values without an allowlist or confinement to the input directory. Processing an attacker-controlled OpenAPI description can cau...

7.1CVSS
SaveExploits0References4
CVE
CVE
added yesterday5 views

CVE-2026-62680

In Orval versions before 8.22.0, the affected code in packages/orval/src/import-specs.ts loads external $ref values without any allowlist or directory confinement. Processing a malicious OpenAPI spec can trigger outbound requests to attacker-chosen or internal HTTP services, read absolute or out-...

7.1CVSS5.5AI score
SaveExploits0References4
Nuclei
Nuclei
added yesterday5 views

Crawl4AI < 0.8.0 - Local File Inclusion

The Crawl4AI Docker API endpoints accepted arbitrary URL schemes without an allow-list. An unauthenticated request with a file:// URL could read local files. Fixed in 0.8.0, which restricts accepted URL schemes. id: CVE-2026-26217 info: name: Crawl4AI 0.8.0 - Local File Inclusion author:...

9.2CVSS5.3AI score0.01914EPSS
SaveExploits0References1
NVD
NVD
added yesterday3 views

CVE-2026-73387

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday15 views

CVE-2026-73387 WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS
SaveExploits0References1
CVE
CVE
added yesterday5 views

CVE-2026-73387

The Resido WordPress theme (versions ≤ 1.5) contains an unauthenticated Local File Inclusion vulnerability exploitable over the network with high complexity, no privileges required, and no user interaction. CVSS 3.1 scores it HIGH (8.1) with full impact on confidentiality, integrity, and availabi...

8.1CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-62388

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS5.2AI score
SaveExploits0References1
Nuclei
Nuclei
added yesterday53 views

Wordpress Zedna eBook download <1.2 - Local File Inclusion

Wordpress Zedna eBook download prior to version 1.2 was affected by a filedownload.php local file inclusion vulnerability. id: CVE-2016-10924 info: name: Wordpress Zedna eBook download 1.2 - Local File Inclusion author: idealphase severity: high description: | Wordpress Zedna eBook download prior...

7.5CVSS7.6AI score0.11662EPSS
SaveExploits0References5
Nuclei
Nuclei
added yesterday64 views

Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local File Inclusion

Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 is susceptible to local file inclusion in public/examples/resources/getsource.php. This could allow remote attackers to read arbitrary files via the file parameter. id: CVE-2017-15363 info: name: Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local...

7.5CVSS7.6AI score0.15333EPSS
SaveExploits1References5
Nuclei
Nuclei
added yesterday56 views

Joomla! <=2.0.0 RC2 - Local File Inclusion

Joomla! 2.0.0 RC2 and earlier are susceptible to local file inclusion in the eXtplorer module comextplorer that allows remote attackers to read arbitrary files via a .. dot dot in the dir parameter in a showerror action. id: CVE-2008-4764 info: name: Joomla! =2.0.0 RC2 - Local File Inclusion...

5CVSS5.5AI score0.16505EPSS
SaveExploits2References4
Nuclei
Nuclei
added yesterday10 views

Flowise - Path Traversal

Flowise = 2.2.8 contains a path traversal vulnerability caused by missing validation of chatflowId and chatId parameters in file handling, letting unauthenticated attackers read and write arbitrary files, exploit requires no authentication. id: CVE-2025-71334 info: name: Flowise - Path Traversal...

9.8CVSS5.4AI score0.03903EPSS
SaveExploits1References2
Nuclei
Nuclei
added yesterday68 views

esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

8.7CVSS8.7AI score0.01636EPSS
SaveExploits0References3
Nuclei
Nuclei
added yesterday89 views

WordPress WPvivid Backup <0.9.76 - Local File Inclusion

WordPress WPvivid Backup version 0.9.76 is vulnerable to local file inclusion because the plugin does not sanitize and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server. id: CVE-2022-2863 info: name: WordPress...

4.9CVSS5.2AI score0.19624EPSS
SaveExploits3References5
Nuclei
Nuclei
added yesterday56 views

LG-Ericsson iPECS NMS 30M - Local File Inclusion

Ericsson-LG iPECS NMS 30M allows local file inclusion via ipecs-cm/download?filename=../ URIs. id: CVE-2018-15138 info: name: LG-Ericsson iPECS NMS 30M - Local File Inclusion author: 0xAkoko severity: high description: Ericsson-LG iPECS NMS 30M allows local file inclusion via...

7.5CVSS7.4AI score0.12851EPSS
SaveExploits0References4
Nuclei
Nuclei
added yesterday110 views

Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion

In avataruploader v7.x-1.0-beta8 the view.php program doesn't restrict file paths, allowing unauthenticated users to retrieve arbitrary files. id: CVE-2018-9205 info: name: Drupal avataruploader v7.x-1.0-beta8 - Local File Inclusion author: daffainfo severity: high description: In avataruploader...

7.5CVSS7.5AI score0.55714EPSS
SaveExploits6References5
Nuclei
Nuclei
added yesterday31 views

Piano LED Visualizer 1.3 - Local File Inclusion

Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. id: CVE-2022-24900 info: name: Piano LED Visualizer 1.3 - Local File Inclusion author: 0xAkoko severity: high description: | Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. impact: | An attacker...

9.9CVSS8AI score0.0841EPSS
SaveExploits1References5
Nuclei
Nuclei
added yesterday53 views

Ignite Realtime Openfire <4.42 - Local File Inclusion

Ignite Realtime Openfire through 4.4.2 is vulnerable to local file inclusion via PluginServlet.java. It does not ensure that retrieved files are located under the Openfire home directory. id: CVE-2019-18393 info: name: Ignite Realtime Openfire 4.42 - Local File Inclusion author: pikpikcu severity...

5.3CVSS5.5AI score0.13945EPSS
SaveExploits1References5
Nuclei
Nuclei
added yesterday30 views

Jiangnan Online Judge 0.8.0 - Local File Inclusion

Jiangnan Online Judge aka jnoj 0.8.0 is susceptible to local file inclusion via web/polygon/problem/viewfile?id=1&name=../. id: CVE-2019-17538 info: name: Jiangnan Online Judge 0.8.0 - Local File Inclusion author: pussycat0x severity: high description: | Jiangnan Online Judge aka jnoj 0.8.0 is...

7.5CVSS7.4AI score0.11157EPSS
SaveExploits1References4
Nuclei
Nuclei
added yesterday58 views

Joomla! Component redSHOP 1.0 - Local File Inclusion

A directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1531 info: name: Joomla! Component redSHOP 1.0 - Local File Inclusion author: daffainfo...

7.5CVSS5.6AI score0.16915EPSS
SaveExploits2References5
Nuclei
Nuclei
added yesterday51 views

WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. id: CVE-2011-1669 info: name: WP Custom Pages 0.5.0.1 - Local File Inclusion LFI...

5CVSS5.6AI score0.22157EPSS
SaveExploits2References5
Rows per page
Query Builder