CVE-2026-112238 SQL Injection in extension "File manager" (ameos_filemanager)

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

EUVD-2026-104867

The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...

CVE-2020-25223

CVE-2020-25223 A PoC script for testing CVE-2020-25223 against an affected Sophos UTM. Given an IP address, the script attempts to download a copy of the devices /etc/shadow file. Original research: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...

WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Academist Core versions = 1.4.1...

CVE-2021-32804

CVE-2021-32804 This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm". Environment Setup docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Vulnerability Reproduction node-tar...

CVE-2026-43854

A vulnerability exists that could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices . No specific software versions, root causes, or remediation steps are provided in the documents. Exploitation details are not provided.

CVE-2026-43854

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices...

CVE-2026-43852

CVE-2026-43852 involves a vulnerability that could allow an authenticated attacker to write files to arbitrary locations on the system. The provided documents do not specify the affected software, hardware, version, or specific root cause. Details regarding remediation or exploit availability are...

CVE-2026-43852

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system...

EUVD-2026-104853

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system...

CVE-2026-43851

A path traversal vulnerability exists that could allow an authenticated attacker to read arbitrary files on the system. Technical details regarding the specific affected software, version, or root cause are not provided in the documents. No exploit information or remediation steps are available.

CVE-2026-43851

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system...

TYPO3-EXT-SA-2026-034: SQL Injection in extension "File manager" (ameos_filemanager)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-034...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Usage python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com Reference https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited...

cve-2017-7374

cve-2017-7374 To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory...

CVE-2008-4654

CVE-2008-4654 A fully functional exploit for the stack-based buffer overflow vulnerability CVE-2008-4654 in VideoLan’s VLC Media Player 0.9.4 when processing TiVo files. It targets a 32-bit binary running on a 64-bit Windows system and uses a WOW64 egghunter to bypass limited stack space. Usage...

CVE-2019-8997

CVE-2019-8997 An XML External Entity Injection XXE vulnerability in the Management System console of BlackBerry AtHoc versions earlier than 7.6 HF-567 could allow an attacker to potentially read arbitrary local files from the application server or make requests on the network by entering...

CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress = 2.3.3 - Unauthenticated Arbitrary File Upload Description The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check o...

OHTS

OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...

CVE-2026-112177

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted...