CVE-2026-109741 Use-after-free in the Storage: Bucket File System component

Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109741

A Use-after-free vulnerability exists in the Storage: Bucket File System component. This flaw affects Firefox , Firefox ESR , and Thunderbird . The vulnerability has been addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . No specific exploit details or in-the...

CVE-2026-109741

Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-5718

CVE-2026-5718 CVE-2026-5718: Unauthenticated File Upload To RCE in DnD Upload CF7 Plugin CVE-2026-5718 — DnD CF7 File Upload RCE Scanner Plugin: Drag and Drop Multiple File Upload for Contact Form 7 Plugin Slug: drag-and-drop-multiple-file-upload-contact-form-7 CVE ID: CVE-2026-5718 CVSS Score: 8...

CVE-2026-1555

CVE-2026-1555 WebStack = 1.2024 - Unauthenticated Arbitrary File Upload 👤 By: Nxploited 🔗 Nxploited ZeroDay Hub — t.me/KNxploited 💀 CVE-2026-1555 — WebStack WordPress Arbitrary File Upload Unauthenticated Remote Code Execution viaimgupload AJAX handler 📌 Vulnerability Overview Field| Detail ---|-...

CVE-2026-48939

CVE-2026-48939 — iCagenda Joomla RCE Exploit Pre-Auth Arbitrary File Upload → PHP Code Execution Overview CVE-2026-48939 is a CVSS 10.0 critical vulnerability in the iCagenda events calendar extension for Joomla. The frontend event registration form's file attachment feature enforces access...

CVE-2020-14008

CVE-2020-14008 - ManageEngine Applications Manager RCE Authenticated Remote Code Execution via Arbitrary File Upload in Zoho ManageEngine Applications Manager versions Examples Basic python3 cve-2020-14008.py https://192.168.100.2:8443 admin admin 192.168.100.3 1337 Exploit Flow 1. Login -...

CVE-2025-7441

CVE-2025-7441 StoryChief 1.0.42 - Arbitrary File Upload Vulnerability CVE-2025-7441 - Technical summary Affected component: StoryChief WordPress plugin Vulnerability type: Unauthenticated arbitrary file upload Vulnerable endpoint: /wp-json/storychief/webhook Root cause: The plugin accepts a JSON...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauth RCE rewrite Python exploit for the unauthenticated Lua-injection RCE in Wing FTP Server ≤ 7.4.3. Designed for shell delivery — one command from check to a working netcat callback. Written some time ago for wingData lab on HTB and open-sourced now. Use only...

CVE-2026-109249

A flaw was found in FreeRDP. An out-of-bounds read vulnerability in the Remote Assistance file parser allows an attacker to cause a Denial of Service DoS. By convincing a user to open a specially crafted Remote Assistance invitation file, the application mishandles memory bounds while processing...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Exploit ⚠️ Disclaimer : This repository is created for educational and research purposes only as part of my security research to understand and document CVE-2025-49132. All credit for the vulnerability discovery goes to the original researchers. / |\ \ / /| | | /...

CVE-2026-44881_exploit

CVE-2026-44881 — Portainer Git Symlink → Arbitrary Host File Read Single-script exploit for CVE-2026-44881 , a Git symlink injection in Portainer's stack-deployment flow that lets any low-privilege authenticated user with stack-creation rights read arbitrary files reachable by the Portainer...

CVE-2025-30208

CVE-2025-30208 !IMPORTANT Disclaimer This exploit is for educational and ethical security testing purposes only. The use of this exploit against targets without prior mutual consent is illegal, and the developer disclaims any liability for misuse or damage caused by this exploit. Installation git...

CVE-2020-25068

CVE-2020-25068 Python exploit for Conacwin v3.7.1.2. Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal...

Vitejs-exploit

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Muhammad Waseem. Usage: python viteexploit.py -u http://target.com python viteexploit.py...

CVE-2026-4883

CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...

cosmicsting-cve-2024-34102-exploit

CosmicSting CVE-2024-34102 Exploit Suite Complete exploit suite for CVE-2024-34102 - The CosmicSting XXE vulnerability in Adobe Commerce / Magento 2.4.x. Vulnerability Details CVE : CVE-2024-34102 CVSS 9.8 Type : XML External Entity Injection XXE Impact : Unauthenticated remote file read, SSRF,...

CVE-2026-89200

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands...

CVE-2026-85114

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.61. Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write...

CVE-2026-63350

Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trace file. Successful exploitation could allow...