Lucene search
+L

222 matches found

Kitploit
Kitploit
added 2026/09/05 8:59 a.m.7 views

CVE-2026-48813-POC

Flawfinder-ANSI-Exploit-POC In version 2.0.19 of Flawfinder, no filename sanitization occurs when parsing possibly malicious filenames. Known affected terminals are libvte based, and the example below shows a mate-terminal. This exploit has since been fixed in version 2.0.20 as of 5/17/26 by Davi...

8.7CVSS5.9AI score0.00326EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 2:32 a.m.5 views

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS命令注入 PoC English version 概述 此仓库是 File Browser (版本 2.0.0 至 2.33.1)中发现的一个严重 OS 命令注入漏洞 CVE-2026-35585 的概念验证(PoC)。 该漏洞存在于“自定义命令钩子”功能中。由于在 shell 执行时,诸如 $FILE 或 $USERNAME 等环境变量未能得到充分清理,拥有文件上传权限的已认证用户可能利用恶意文件名在主机系统上执行任意命令。 发现者: saku0512 https://github.com/Saku0512 ⚠️ 免责声明...

7.5CVSS8.1AI score0.01922EPSS
SaveExploits2References3
OSV
OSV
added 2026/09/04 2:32 p.m.2 views

CVE-2026-85684 marker through 2.0.0 Path Traversal via upload filename

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existin...

8.8CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
added 2026/09/04 2:32 p.m.3 views

EUVD-2026-71133

marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the file.filename parameter. Unauthenticated attackers can supply filenames containing directory traversal sequences to write arbitrary files to any location or delete existin...

9.1CVSS5.5AI score0.00657EPSS
SaveExploits0References4
Ubuntu
Ubuntu
added 2026/09/03 12:43 p.m.6 views

USN-8723-1: SPICE vdagent vulnerabilities

It was discovered that SPICE vdagent had an integer overflow in the buffer size calculation used when writing to the daemon socket. A malicious or compromised SPICE host could possibly use this issue to cause SPICE vdagent to crash, resulting in a denial of service. CVE-2026-57965 It was discover...

5.1CVSS5.9AI score0.00126EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 3:38 a.m.7 views

POC-CVE-2026-19679

CVE-2026-19679 — insufficient sanitization of uploaded filenames input validation Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. POST /rest/auditFile with tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" returned HTTP 200 and registered AuditFile 1000002 — the shell-metachar filena...

8.8CVSS5.3AI score0.01068EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:13 a.m.6 views

CVE-2023-38831-POC

Descripción Nombre : CVE-2023-38831 Puntuación CVSS : 7.8 Versiones afectadas : Winrar 6.23 CVE-2023-38831 es una vulnerabilidad de día cero que afecta a todas las versiones de WinRAR anteriores a 6.23. El problema está en el procesamiento del formato ZIP, lo que podría permitir a los atacantes...

7.8CVSS6.7AI score0.97894EPSS
SaveExploits49References1
NVD
NVD
added 2026/08/27 8:18 p.m.9 views

CVE-2026-81730

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global saveAttachment in htdocs/emailcollector/lib/emailcollector.lib.php builds $filepath = $path . $filename . '.' . $ext and hands it ...

8.8CVSS0.00376EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/25 5:16 p.m.6 views

EUVD-2026-65616

A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates login arguments without proper sanitization, which are then passed to a local shell. Successful exploitation could lead to arbitra...

7.8CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/08/24 10:58 a.m.9 views

WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability

Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...

8.1CVSS5.3AI score0.0032EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-65612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted...

5.1CVSS5.9AI score0.0033EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/19 2:35 p.m.41 views

CVE-2026-44829

Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier are vulnerable to a path traversal in zip entry names. The root cause is that filepath.Base on Linux does not treat backslashes as path separators, so Windows-style parent directory components (e.g., ..\..\Windows\System32...

8.8CVSS8.8AI score0.00372EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/19 2:17 p.m.11 views

CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.9AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 2:17 p.m.8 views

UBUNTU-CVE-2026-65612

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.9AI score0.0033EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/19 1:21 p.m.8 views

CVE-2026-65612 Shell Command Injection in nnn

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.4AI score0.0033EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 1:21 p.m.8 views

EUVD-2026-62401

nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...

5.1CVSS5.5AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/14 7:56 p.m.16 views

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

8.7CVSS6AI score
SaveExploits0References6
NVD
NVD
added 2026/08/14 6:17 p.m.14 views

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

8.8CVSS0.01068EPSS
SaveExploits2References1
EUVD
EUVD
added 2026/08/14 5:35 p.m.8 views

EUVD-2026-58741

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

8.7CVSS5.4AI score0.01068EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2026/08/14 5:35 p.m.13 views

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...

5.3AI score0.01068EPSS
SaveExploits2References2
Rows per page
Query Builder