481482 matches found
WordPress Printcart Store – Web to Print Product Designer for WooCommerce plugin <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution vulnerability
Unauthenticated Arbitrary File Upload to Remote Code Execution vulnerability discovered by Osman Hussein in WordPress Plugin Printcart Web to Print Product Designer for WooCommerce versions = 2.9.1...
CVE-2024-6460
CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site URL e.g.,...
WordPress BP Profile Search plugin <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution vulnerability
Unauthenticated Local File Inclusion to Remote Code Execution vulnerability discovered by snr in WordPress Plugin BP Profile Search versions = 5.9...
CVE-2026-74040
Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.processfilesfromworker allowing a cluster worker to overwrite protected master files. Attackers controlling a worker can use a trailing-slash basename bypass and missing extravalid enforceme...
CVE-2026-74031
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the deleterulefile and deletedecoderfile helpers that allows malicious cluster workers to delete arbitrary files via an unvalidated filename parameter. Attackers holding the cluster key can invoke these helpers through...
DEBIAN-CVE-2026-109956
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the modelfilename or model argument can make the weka JVM write files via -d or probe files via -l...
CVE-2026-11784-Optimole-CSRF
CVE-2026-11784: CSRF to Arbitrary File Overwrite in Optimole WordPress Plugin Summary A Cross-Site Request Forgery CSRF vulnerability in the Optimole plugin for WordPress versions = 4.2.5 allows unauthenticated attackers to silently overwrite existing media library assets via the...
CVE-2026-43637-cornac
CVE-2026-43637: Path Traversal Tar Slip in Cornac via extractarchive Severity: High, CVSS 4.0 8.8 , Critical, CVSS 3.1 9.1assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N Vector v4.0: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected:...
CVE-2026-48908-joomla-sp-page-builder-detection
CVE-2026-48908 — Joomla SP Page Builder Validation and Detection Laboratory validation of CVE-2026-48908 in the Joomla SP Page Builder component, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in which the SP...
CVE-2026-56291
Auto Scanning Version & Exploit CVE-2026-56291 POC Joomla Unauthenticated Arbitrary File Upload leading to RCE in Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
Windows Portable Device File System Driver Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...
Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...