AsmResolver

AsmResolver O AsmResolver é uma biblioteca para ler, modificar e reconstruir arquivos Portable Executable PE. Ele suporta imagens PE executadas nativamente no Windows, bem como imagens contendo metadados gerenciados .NET. O AsmResolver é distribuído sob a licença MIT. Principais Recursos O...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin 8.5-8.9.3 - 8.9.2 - Subscriber+ Arbitrary Image Move vulnerability

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin 8.5-8.9.3 - 8.9.2 - Subscriber+ Arbitrary Image Move vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Directorist versions 8.5-8.9.2...

BiblioRCE

Ein Versehen in BiblioCraft, das eingeschränkte serverseitige Dateimanipulation ermöglicht. Diese Methode benötigt nur BiblioCraft! Nicht allzu viel Trickserei und keine anderen Mods sind erforderlich, um Codeausführung zu erreichen! CoreTweaks Der ursprüngliche Bericht über CoreTweaks ist hier z...

MAGNOLIA-8281

MAGNOLIA-8281: Bypass de Restrições 2 do FreeMarker no Magnolia CMS Um problema no Filtro FreeMarker do Magnolia CMS v6.2.16 e versões anteriores permite que atacantes contornem as restrições de segurança e leiam/gravem/movam/copiem/excluam arquivos arbitrários por meio de uma carga útil FreeMark...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php wfufiledownloader.php फ़ाइल के माध्यम से पहुँच, WordPress File Upload Solution poc, समाधान में भेद्यता उत्पन्न होती है, मनमाने ढंग से फ़ाइलों तक पहुँचकर उन्हें हेरफेर या संशोधित किया जा सकता है...

CVE-2022-1388

CVE-2022-1388 Impatto Questa vulnerabilità potrebbe consentire a un utente malintenzionato non autenticato con accesso di rete al sistema BIG-IP tramite la porta di gestione e/o gli indirizzi IP self di eseguire comandi arbitrari di sistema, creare o eliminare file o disabilitare servizi. Non vi ...

CVE-2026-44517

A flaw was found in Buildah. Insecure handling of temporary directories and symlinks during the image build process, specifically within TempDirForURL, downloadToDirectory, and stdinToDirectory functions, allows a malicious server supplying a Git repository or tar archive to cause files outside t...

CVE-2020-14974

CVE-2020-14974 Ein einfacher POC, der eine Schwachstelle in IObitUnlocker 1.1.2 demonstriert, die IOCTL-Codes im anfälligen Treiber IObitUnlocker.sys nutzt, und es einem Benutzer mit niedrigen Rechten ermöglicht, laufende Dateien zu entsperren, zu löschen, umzubenennen, zu kopieren und zu...

mrtg security update

An update is available for mrtg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Multi Router Traffic Grapher MRTG monitors the traffic load on network...

EUVD-2026-63124

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user account running Splunk Enterprise can read into a lookup that the user controls. The user could then access all relevant data and...

VulnCheck KEV: CVE-2025-52907

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...

CVE-2026-19725

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in any existing writable directory of t...

CVE-2026-34492 Airwall - Arbitrary file read

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...

EUVD-2026-58772

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...

CVE-2026-34492

Johnson Controls Airwall (before 4.1) is affected by CVE-2026-34492: external control of a file name or path can lead to arbitrary file read (and related file manipulation). The provided documents do not specify the exact root cause details, vulnerable components, or affected versions beyond Air...

CVE-2026-34492

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...

CVE-2026-17071

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...

CVE-2026-17071

CVE-2026-17071 affects IBM i 7.3–7.6. A remote authenticated attacker can perform file manipulation due to a path traversal flaw in Digital Certificate Manager. The vulnerability is rooted in improper path handling, enabling manipulation of files when authenticated over the network. Affected IBM ...

CVE-2026-17071 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...