108983 matches found
CVE-2011-2461_Magento_Patch
CVE-2011-2461MagentoPatch By Edmonds Commerce This CVE relates to a CSRF vulnerability in the Adobe Flex .swf files used by Magento. You can find more information regarding the CVE here: Peter O'Callaghan - Magento CSRF vulnerability via Adobe Flex Minded Security - The old is new, again...
CVE-2023-33802
CVE-2023-33802 SumatraPDF 3.4.6 -32-bit Denial Of Services DoS Description In this bug, a crash is addressed which is manifested when we open two large size text files first.txt & second.txt as input to SumatraPDF 32 bit. Run the following command, or you can manually open the both files in...
CVE-2019-3396-confluence-poc
CVE-2019-3396-confluence-poc Vulnerability verification txt and template files...
CVE-2026-97332
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
Docx-Exploit-2021
Docx-Exploit-2021 يستخدم هذا الاستغلال Exploit الخاص بـ docx ملفات res داخل ملف Microsoft .docx لتنفيذ ملفات ضارة. يرتبط هذا الاستغلال بـ CVE-2021-40444 إذا لم تتمكن من إعادة الإنتاج يرجى مراسلتي على تيليغرام: LazarusRebor...
CVE-2026-80047
A flaw was found in the Hugging Face Transformers library. A remote attacker could exploit this vulnerability by enticing a user to load a model using the GenerativePreTrainedModel.loadcustomgenerate function. This function writes remote Python files to the local disk without requiring explicit...
CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
EUVD-2026-92076
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
WordPress User Private Files plugin < 2.2.0 - Unauthenticated Private File Disclosure vulnerability
Unauthenticated Private File Disclosure vulnerability discovered by Akshat Parikh SN1PER in WordPress Plugin User Private Files versions 2.2.0...
CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
CVE-2026-97332
The User Private Files WordPress plugin, in versions before 2.2.0 , is vulnerable to unauthenticated private file disclosure on multisite installations. The root cause is a rewrite rule bypass where requests to stored private files do not route through the plugin's required access check. This all...
CVE-2024-46987
CVE-2024-46987: اجتياز المسار الآلي 📖 نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC مبني بلغة Python لثغرة CVE-2024-46987. هذه الثغرة هي خلل في اجتياز المسار Path Traversal موجود في وحدات تنزيل الملفات في بعض بيئات أنظمة إدارة المحتوى وتحديدًا Camaleon CMS الإصدار 2.9.0 يقوم السكربت بأتمتة...
AI-FILE
AIfile aifile est un profil Mythic C2 qui utilise l'API OpenAI Files publiquement documentée pour échanger des messages d'implant via des fichiers jsonl au lieu d'un listener HTTP/S traditionnel. Il s'appuie sur le comportement de l'API Files défini par OpenAI dans la documentation publique :...
EUVD-2026-92047
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...
CVE-2026-105125
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...
PT-2026-104611
Name of the Vulnerable Software and Affected Versions User Private Files WordPress plugin versions prior to 2.2.0 Description On multisite installations, the plugin fails to protect stored private files because the rewrite rule used to route file requests through the access check is not reached...
CVE-2026-105125: Improper Limitation of a Pathname to a Restricted Directory
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...
CVE-2026-97332: Undefined Security Weakness
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...
CVE-2026-105125
LaraDashboard versions prior to 1.4.8 are vulnerable to a path traversal vulnerability within the /api/translations/{lang} endpoint. This flaw allows unauthenticated attackers to read sensitive JSON files, such as composer.json, by manipulating the {lang} route segment. Specifically, on Windows h...