CVE-2026-81572 Local Privilege Escalation in CodeMeter Runtime on Windows

In CodeMeter Runtime from version 8.40 to excluding 8.41a and 9.00 to excluding 9.10, cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before fi...

EUVD-2026-66979

cmu.exe --create-io --file C: creates a predictable temporary file under C:\CM-Stick. The directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local attacker can create a junction at the temporary...

CVE-2026-3844

Exploit di massa CVE-2026-3844 CVE-2026-3844 – Breeze Cache WordPress =2.4.4 consente il caricamento di file non autenticato tramite fetchgravatarfromremote quando l'hosting Gravatar locale è abilitato. Installazione Scarica il repository root@kitploit: git clone...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache RCE Caricamento File Arbitrario Non Autenticato → Esecuzione di Codice Remoto...

CVE-2026-33725

CVE-2026-33725 Una proof-of-concept per CVE-2026-33725, una Remote Code Execution e Arbitrary File Read tramite H2 JDBC INIT Injection nell'importazione di serializzazione EE in Metabase. Versioni Vulnerabili Metabase Enterprise ≥ v1.47 e v1.54.22 Metabase Enterprise ≥ v1.54.0 e v1.54.22 Metabase...

CVE-2026-20841-PoC

CVE-2026-20841-PoC Proof of Concept per CVE-2026-20841 CVE-2026-20841 – Dettagli CVE-2026-20841 è una vulnerabilità che interessa Microsoft Notepad, in cui un input appositamente predisposto può innescare l'esecuzione non intenzionale di comandi. Il problema si verifica a causa di una gestione...

CVE-2026-42879

CVE-2026-42879 - FacturaScripts - Caricamento File Non Restrittivo Autenticato tramite Bypass del Tipo MIME Riepilogo Esiste una vulnerabilità di caricamento file non restrittivo autenticato nella funzionalità di caricamento immagini prodotto di FacturaScripts. Un attaccante con credenziali valid...

CVE-2024-55457-PoC

CVE-2024-55457-PoC MasterSAM Star Gate v11 è vulnerabile a un attacco di directory traversal tramite l'endpoint /adama/adama/downloadService. Un attaccante può sfruttare questa vulnerabilità manipolando il parametro file per accedere a file arbitrari sul server, con la potenziale esposizione di...

Metabase_Nmap_Script

MetabaseNmapScript È uno script nmap per la vulnerabilità di Metabase CVE-2021-41277 USO -- nmap -Pn -n -p443 --script metabase.nse -- PORT STATE SERVICE -- 443/tcp open https -- | metabase: -- | VULNERABLE: -- | Metabase CVE-2021-41277 -- | State: VULNERABLE Exploitable -- | IDs:...

CVE-2026-4660-PoC

CVE-2026-4660 PoC Proof of Concept für CVE-2026-4660 HashiCorp Advisory in hashicorp/go-getter. Ich bin der ursprüngliche Melder. Ein Angreifer veröffentlicht ein Terraform-Modul mit einem ref von --pathspec-from-file=/pfad/zu/datei. Wenn das Opfer terraform init ausführt, klont go-getter das...

CVE-2026-39973-PoC

CVE-2026-39973-PoC Dies ist ein kleiner C-APK-Datei-Builder für CVE-2026-39973. Danksagungen OnlyToxi – Hilfe beim Pfad wird weiterhin helfen & emotionale Unterstützung. iBotPeaches/Apktool – Dokumentation & Parsing. Haftungsausschluss Dies ist ein Proof of Concept , der ausschließlich für...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: Eine Path-Traversal-Schwachstelle in der Datei-Upload-Funktionalität in tinyfilemanager.php im Tiny File Manager Project’s Tiny File Manager = 2.4.3 ermöglicht es entfernten Angreifern mit gültigen Benutzerkonten, schädliche PHP-Dateien in das Webroot hochzuladen un...

EUVD-2026-66379

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

CVE-2026-25964

CVE-2026-25964 PoC - Tandoor Recipes LFI Autenticato Proof-of-Concept per Divulgazione Locale di File Autenticata tramite Importazione Ricette Divulgazione: Originariamente segnalata da me tramite GHSA-6485-jr28-52xx ⚠️ Solo per test di penetrazione/ricerca autorizzati. Informazioni sulla...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache = 2.4.4 Caricamento Arbitrario di File Non Autenticato fino a RCE Panoramica...

CVE-2026-31431

copyfun einfache Demonstration des Exploits für CVE 2026-31431 copyfun vergiftet den Cache für die angegebene Zieldatei mit den bereitgestellten Payload-Bytes...

CVE-2026-77991

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

CVE-2026-77016

The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...

CVE-2026-77018

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a publicly reachable directory, allowing users with a role as low as subscriber to upload arbitrary files and achieve remote code...

CVE-2026-77017

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...