-Grafana-LFI-CVE-2021-43798

🚀 Grafana LFI Exploit CVE-2021-43798 Automation script in Python 3 to exploit the Local File Inclusion LFI vulnerability in Grafana versions 8.0.0 to 8.3.0. This exploit allows directory traversal to read sensitive operating system files without authentication. ✨ Features Python 3.10+ compatibili...

WordPress Tainacan plugin <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Subscriber+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin Tainacan versions = 1.3.0...

WordPress 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin <= 2.34.5 - Unauthenticated Limited File Write / Cache Poisoning vulnerability

Unauthenticated Limited File Write / Cache Poisoning vulnerability discovered by Swayam Bhageria in WordPress Plugin 10Web Booster – Website speed optimization, Cache & Page Speed optimizer versions = 2.34.5...

WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.3.7 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Osman Hussein in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.3.7...

CVE-2026-102740

The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...

CVE-2026-102740 AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink

The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...

CVE-2026-102740 AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink

The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...

CVE-2026-102740 AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink

The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...

EUVD-2026-102223

The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...

CVE-2026-102740

The AsyncHttpClient library (versions 2.0.0 to 2.16.1 and 3.0.12) contains a vulnerability in PropertiesBasedResumableProcessor . The component stores resumable download state at the predictable shared path $java.io.tmpdir/ahc/ResumableAsyncHandler.properties with default permissions and follows ...

CVE-2026-102740

The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...

CVE-2026-55876 Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts

Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG and HTML attachments because conf/configs/common.py omits those formats from BLOCKEDATTACHMENTEXTENSIONS and...

CVE-2026-55876

The Helium student planner (prior to version 2.2.60 ) is vulnerable to Stored XSS via the POST /planner/attachments/ endpoint. The root cause is that conf/configs/common.py fails to include SVG and HTML formats in the BLOCKED_ATTACHMENT_EXTENSIONS and BLOCKED_ATTACHMENT_MIME_TYPES lists, which th...

CVE-2026-55876 Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts

Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG and HTML attachments because conf/configs/common.py omits those formats from BLOCKEDATTACHMENTEXTENSIONS and...

WordPress Groundhogg — CRM, Newsletters, and Marketing Automation plugin <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion vulnerability

Authenticated Sales Representative+ Arbitrary File Deletion vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Groundhogg versions = 4.9.3...

CVE-2026-62679

Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/path, concatenates the attacker-controlled path with the local storage root and performs a string-prefix check before canonicalizing dot segments. Under the supported non-default...

CVE-2026-102631

In authd before 0.7.1, the user identity matching in UpdateUser internal/users/manager.go resolves an incoming login by the broker-scoped provider ID, but falls back to matching the username when the provider ID does not belong to any known user, and does not reject a conflicting non-empty provid...

bsh-file-validation (>=0.0.4, <=0.0.21), crewai-files (>=1.11.1.dev20260324, <=1.15.28) +4 more potentially affected by CVE-2026-104266 via tinytag (>=2.1.0, <=2.2.1)

tinytag PYPI version =2.1.0, =0.0.4, =1.11.1.dev20260324, =0.95.0, =0.11.12rc1, =1.128.0, =1.137.0 Source cves: CVE-2026-104266 Source advisory: MEND:CVE-2026-104266...

Driftnet

Driftnet CTF writeup: rooting a Linux box via CVE-2024-23334...

CVE-2026-61702 OpenPrinting CUPS: root-side banner file disclosure

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copybanner in scheduler/ipp.c uses the attacker-controlled IPP attributes-natural-language value as a directory component beneath DataDir/banners when processing a job-sheets...