UBUNTU-CVE-2026-70626

NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open that allows local attackers to read arbitrary files outside the corpus root. The vulnerability exists because path validation is lexical and does not account for symlink resolution, enabling attackers to place...

Linux Distros Unpatched Vulnerability : CVE-2026-78675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file...

UBUNTU-CVE-2026-63312

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open directly instead of pathsec.open. Attackers who control the fileid argument can read arbitrary local files regardless of the ENFORCE setting,...

CVE-2023-34598

CVE-2023-34598 - Gibbon v25.0.0 LFI-Exploit Dieses Repository enthält ein Python-Skript, das dabei hilft, eine Local File Inclusion LFI-Schwachstelle CVE-2023-34598 in Gibbon v25.0.0 zu identifizieren und auszunutzen. Das Skript kann eine Ziel-Website auf eine mögliche Schwachstelle scannen und,...

CVE-2026-32560

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

CVE-2022-29597

CVE-2022-29597: Inclusione di File Locali in RSS v500 L'applicazione RRS v500 di Solutions Atlantic è vulnerabile a una vulnerabilità di Inclusione di File Locali LFI. Qualsiasi utente autenticato ha la possibilità di fare riferimento a file di sistema interni nelle richieste effettuate alla pagi...

cve-lfi-lab

🧠 Laboratorio CVE: Simulazione Analista SOC Livello 1 CVE-2025-39507 | Local File Inclusion nel Plugin Nasa Core di WordPress 📝 Scenario: Una Giornata nel SOC È un normale lunedì. Sono connesso al dashboard del SOC, esaminando gli avvisi come al solito. Ne arriva uno che attira la mia attenzione:...

CVE-2026-32560 WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

CVE-2026-32560 WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

CVE-2026-32560

MagicAI for WordPress (AI Text, Image, Chat, Code, and Voice Generator) plugin versions ≤ 1.4 are affected by a Local File Inclusion (LFI) vulnerability accessible to authenticated users with the Subscriber role. The vulnerability is rated CVSS 8.8 (HIGH) by Patchstack, with a network attack vect...

CVE-2024-34470

CVE-2024-34470 HSC Mailinspector 5.2.17-3 a 5.2.18 - Inclusione Locale di File...

CVE-2022-47615

CVE-2022-47615 LearnPress Plugin 4.2.0 - وصف LFI غير مصادق عليه الوصف لا يقوم البرنامج المساعد بالتحقق من صحة العديد من المعاملات في نقاط نهاية REST الخاصة بـ lp/v1/courses/archive-course قبل استخدامها في include statement، مما قد يؤدي إلى مشاكل LFI. كيفية الاستخدام root@kitploit: $ python3...

By-Poloss..-..CVE-2026-39938

CVE-2026-39938: Cacti = 1.2.30 - LFI non autenticato Riepilogo esecutivo Campo| Valore ---|--- CVE ID| CVE-2026-39938 Punteggio CVSS| 9.8 Critico Prodotto interessato| Cacti Versioni interessate| = 1.2.30 Versione corretta| 1.2.31 Commit di correzione| 9871f0c Dettagli della vulnerabilità Causa...

awxkit: path traversal via YAML !include directive

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...

CVE-2025-13796-PoC

CVE-2025-13796-PoC deco-cx apps: Parametro analyticsScript.ts AnalyticsScript falsificazione di richiesta lato server PoC : root@kitploit: curl --path-as-is -i -s -k -X $'GET' \ -H $'Host: x.x.x.x' \ $'http://x.x.x.x/live/invoke/website/loaders/analyticsScript.ts?url=file:///etc/passwd'...

CVE-2026-76844

webpack-dev-middleware resolves a request to a local file in getFilenameFromUrl by testing the request pathname against a traversal guard and then slicing it at a fixed character offset. The guard, UPPATHREGEXP applied to path.normalize./$pathname, only matches ".." that stands as a whole path...

CVE-2026-78385

RansomLook contains an insufficient resource validation flaw in its analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and rendered via WeasyPrint . Prior to the fix, WeasyPrint's default URL fetcher resolved resource references without restrictions, all...

EUVD-2026-64886

RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...

CVE-2026-78385 RansomLook Analysis PDF Generation Allows Server-Side Request Forgery and Arbitrary Local File Access

RansomLook contains insufficient resource validation in the analysis PDF generation functionality. Analysis documents are converted from Markdown to HTML and passed to WeasyPrint for PDF rendering. Prior to the fix, WeasyPrint used its default URL fetcher, allowing resource references contained i...

CVE-2026-76844

webpack-dev-middleware suffers from a path traversal vulnerability in its getFilenameFromUrl function, an incomplete fix for CVE-2024-29180 . When publicPath is configured without a trailing slash, a crafted request (e.g., GET /assets../.env against publicPath /assets) bypasses the UP_PATH_REGEXP...