PT-2026-82234

Name of the Vulnerable Software and Affected Versions whichllm versions prior to 0.5.16 Description A code injection issue exists in the run and snippet commands. A remote attacker controlling a HuggingFace repository can achieve arbitrary code execution by crafting a malicious GGUF filename...

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Red Hat Automatic Bug Reporting Tool ABRT contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users...

CVE-2026-79992

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

CVE-2026-79992

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

CVE-2026-79992

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

gin-vulnerable

gin-vulnerable Consumer demo vincolato a github.com/gin-gonic/gin v1.7.0 vulnerabile a CVE-2023-29401. L'handler /download/:filename passa l'input dell'utente direttamente a Context.FileAttachment — il pattern di condizione di exploit che Endor segnala come sfruttabile...

POC-CVE-2026-19681

CVE-2026-19681 — Befehlsinjektion in der Verarbeitung von Datei-Uploads authentifiziert Status: BESTÄTIGT in einer 6.7.2-14.el9-Lab-Umgebung 2026-08-20. Über POST /rest/file/upload wurde ein präparierter Dateiname p;sleep$IFS20;-EvvfJk eingebracht das Kontext-Präfix trägt die Metazeichen;...

POC-CVE-2026-19679

CVE-2026-19679 — अपलोड किए गए फ़ाइलनामों की अपर्याप्त सैनिटाइज़ेशन इनपुट सत्यापन स्थिति: पुष्टि एक 6.7.2-14.el9 लैब पर 2026-08-20। POST /rest/auditFile tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" के साथ HTTP 200 लौटाया और AuditFile 1000002 पंजीकृत किया — शेल-मेटाकैरेक्टर फ़ाइलनाम...

CVE-2025-5880

Whistle 2.9.98 contiene una vulnerabilità di path traversal non corretta perché l'endpoint /cgi-bin/sessions/get-temp-file non riesce a sanificare adeguatamente l'input utente nel parametro filename. Fornendo percorsi assoluti o sequenze di traversal come /etc/passwd, un attaccante può bypassare ...

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC für Responsive Filemanager 9.12.0: Umgehung der Upload-Beschränkungen führt zu RCE Wo steckt die Schwachstelle? Beim Hochladen einer neuen Datei durchlaufen wir die Funktion fixfilename:...

CVE-2026-38473

CVE-2026-38473 is a Stored XSS vulnerability in GazellePW (GazellePosterWall), a PHP-based application, specifically in the subtitle deletion flow at commit 86c4bedf. A remote authenticated user can inject arbitrary JavaScript by uploading a subtitle with a crafted filename. The malicious payload...

CVE-2022-29598

CVE-2022-29598 : Reflektiertes Cross-Site-Scripting XSS in RSS v500 Mitre-URL: https://vulners.com/cve/CVE-2022-29598 NIST-URL: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 Die RRS v500-Anwendung von Solutions Atlantic ist anfällig für eine reflektierte Cross-Site-Scripting XSS-Schwachstelle...

CVE-2022-29597

CVE-2022-29597: Inclusione di File Locali in RSS v500 L'applicazione RRS v500 di Solutions Atlantic è vulnerabile a una vulnerabilità di Inclusione di File Locali LFI. Qualsiasi utente autenticato ha la possibilità di fare riferimento a file di sistema interni nelle richieste effettuate alla pagi...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS-Befehlseinschleusung PoC English version Zusammenfassung Dieses Repository enthält einen Proof of Concept PoC für die kritische OS-Befehlseinschleusungs-Schwachstelle CVE-2026-35585 , die in File Browser Version 2.0.0 bis 2.33.1 entdeckt wurde. Die Schwachstelle...

CVE-2023-38831-POC

Descrizione Nome : CVE-2023-38831 Punteggio CVSS : 7.8 Versioni interessate : Winrar 6.23 CVE-2023-38831 è una vulnerabilità zero-day che interessa tutte le versioni di WinRAR precedenti alla 6.23. Il problema risiede nell'elaborazione del formato ZIP, che potrebbe consentire agli aggressori di...

CVE-2024-12209

CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring = 2.17.0 - Inclusione di File Locale Non Autenticata Descrizione Il plugin WP Umbrella: Update Backup Restore & Monitoring per WordPress è vulnerabile all'Inclusione di File Locale in tutte le versioni fino alla 2.17.0 inclusa, tramit...

CVE-2026-71931

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftpupgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2025-65754

CVE-2025-65754 : Gespeichertes XSS in Algernon 1.17.4 Beschreibung Algernon v1.17.4 ist von einer Cross-Site-Scripting XSS-Sicherheitslücke betroffen, die es Angreifern ermöglicht, über eine manipulierte Nutzlast in einem Dateinamen beliebigen Code auszuführen. Betroffenes Projekt : Algernon -...

EUVD-2026-64990

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftpupgrade function. The vulnerability is caused by insufficient filtering before the filename field is concatenated into a command. A remote attacker can trigger this vulnerability via crafted input to execute...