EUVD-2026-102114

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's processzip and processgzip paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV countrycode value to construct output filenames below...

CVE-2026-63130 EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete

EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manager. Insufficient path validation allows traversal outside the intended directory and permits reading, modifying,...

CVE-2026-63130 EspoCRM: Admin path traversal in LabelManager (Custom Label saving) allows arbitrary `.json` file read, write and delete

EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manager. Insufficient path validation allows traversal outside the intended directory and permits reading, modifying,...

CVE-2026-63130

The open source customer relationship management application EspoCRM is vulnerable to a path traversal flaw in the LabelManager (specifically during Custom Label saving) prior to version 9.3.10 . An authenticated administrator can provide crafted input to bypass insufficient path validation, allo...

EUVD-2026-102107

A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption...

CVE-2026-79843 HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability

A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or data corruption...

CVE-2026-79843

The HPE NonStop SQL/MX EXE component is affected by an out-of-bounds read vulnerability (CWE-125) caused by processing a corrupted file . This flaw can lead to information disclosure, process termination, CPU halt, or data corruption. The vulnerability affects product version T1051L40 and earlier...

CVE-2026-96596

A flaw was found in the Erlang OTP erltar module. An attacker can cause a Denial of Service DoS by supplying a specially crafted TAR archive containing a malformed GNU sparse file. When an application extracts the archive to disk, the extraction process enters an infinite loop, exhausting CPU...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache MyFace (CVE-2026-68536, CVE-2026-76646)

Summary There are vulnerabilities in the Apache MyFace library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty when jsf-2.0, jsf-2.2, jsf-2.3, faces-3.0, faces-4.0 or faces-4.1 is enabled. Vulnerability Details CVEID:CVE-2026-76646 DESCRIPTION: A remote...

CVE-2021-36749

CVE-2021-36749 Apache Druid LoadData Arbitrary File Read Vulnerability Code By:Junsheng @Orange Cybersecurity Lab Orange Cybersecurity Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized attacks on websites are prohibited. Online reading of...

WP-CVE-2023-5360

WP-CVE-2023-5360 Royal Elementor Addons and Templates = 1.3.78 – Unauthenticated Arbitrary File Upload Python 2.7 Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Use? Install Python 2.7 Download Here python file.py Reff :...

CVE-2025-58360-GeoServer-XXE

CVE-2025-58360: GeoServer XXE Lab Unauthenticated XML External Entity XXE Injection in GeoServer OWS/WMS Services CVSS: 9.8 CRITICAL Affected: SLDHandler.parse | | - SLDParser.parseSLD | File/SSRF Quick Start Start both vulnerab...

CVE-2023-5961

This repository contains a Python script and a nuclei template designed to detect vulnerabilities in Moxa ioLogik devices, specifically focusing on the CVE-2023-5961 vulnerability. Additionally, it provides information about the vulnerability and relevant security advisories. Vulnerability...

EUVD-2026-102074

P4 Search formerly Helix Search allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes files to be written or deleted outside the intended logging directory. This could lead to code execution as the P4 Search...

check_38077

File Name: check38077.exe MD5: 3083C2EA88558D2853FC12214BD3C714 SHA1: 1DF92598CA45B788BA9ED841F5A529AD3F6F85CB SHA256: 7B8AB88220D02A125ACB02E38AF3F4DE71FD6425B2C48D310ABE11603BA633B9 CRC32: F444BBAC...

CVE-2024-53677-POC

CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...

CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability Summary SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts e.g., web shells and gain remote code execution. CVE ID : CVE-2024-8232 Vendor :...

cve_2023_38831_scanner

CVE-2023-38831 Scanner Overview The CVE-2023-38831 Scanner is an advanced cybersecurity tool designed to detect and analyze the presence of the CVE-2023-38831 vulnerability in WinRAR installations. This project implements a multi-layered approach to vulnerability detection, incorporating file...

CVE-2026-98388

A flaw was found in the Linux kernel. During program execution, the kernel closes file descriptors marked for close-on-exec while holding an internal process state lock. If closing a file descriptor stalls on an unresponsive or user-space filesystem, the lock remains held and blocks related syste...

CVE-2023-4863

CVE-2023-4863 checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build webp make -f...