479136 matches found
CVE-2026-62020
Unauthenticated Local File Inclusion in TouchUp 1.4 versions...
CVE-2026-62025
Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...
CVE-2026-42724
Unauthenticated Local File Inclusion in CleanSkin = 1.5.0 versions...
CVE-2026-42777
Unauthenticated Local File Inclusion in Aalto = 1.8 versions...
CVE-2026-48193
Unauthenticated Local File Inclusion in Uminex = 1.0.9 versions...
CVE-2026-42704
Unauthenticated Local File Inclusion in Kids Care = 3.2.4 versions...
CVE-2026-40805
Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...
CVE-2026-39799
Unauthenticated Cross Site Scripting XSS in WP File Download = 6.3.6 versions...
CVE-2026-27971_POC
CVE-2026-27971 — Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...
CVE-2026-98267
A flaw was found in the Linux kernel's 9P file system implementation. When write operations extend a file, the kernel fails to update the recorded file size to reflect the new length. A local user performing write operations on a 9P mount can trigger this issue, leading to inconsistent file state...
CVE-2022-40471
CVE-2022-40471 – CPMS Authenticated File Upload RCE 📌 Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...
CVE-2017-1000028
CVE-2017-1000028 POC&EXP for GlassFish4.1.1not including 4.1.1. Param: -u:For single url but without outputing the /etc/passwd. -ut:For single url but with outputing the /etc/passwd. -f:Read url from the url.txt and prove it if the url is vulnerable. -c:This must be used with the parameter...
CVE-2024-27460
CVE-2024-27460 HP Plantronics Hub 3.25.1 Updater Privilege Escalation/Arbitrary File Read Description: HP Plantronics Hub 3.25.1 suffers from a bug that allows low privileged users to perform arbitrary file read as SYSTEM on the machine where the application is installed. Moreover, it is possible...
CVE-2025-13796-PoC
CVE-2025-13796-PoC deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery PoC : curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...
CVE-2020-7699_reproduce
CVE-2020-7699 Reproduction Reproduction for Node.js RCE vulnerabilityCVE-2020-7699, my lab work Setup Node.js edition: v14.16.1, please make sure that the edition of Node.js is 14Other edition will propably work, I didn't test Python edition：3.9.5, Python is only used to send HTTP attack request,...
CVE-2025-34299
CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious SFTP server. How does this detection method work? This...
ipatool
ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements A supported operating system macOS, Linux, Windows or iOS. An Apple Account already configured to use the...
CVE-2026-78530
The WordPress FoodBakery theme (versions
