CVE-2026-100680 Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

CVE-2026-100680 Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

CVE-2026-100676

The media proxy/embed service of stoatchat (stoatchat/stoatchat) before version 0.15.5 contains a vulnerability where it improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml . An unauthenticated remote attacker can exploit this via the /prox...

CVE-2026-100676 stoatchat before 0.15.5 Local Filesystem Read via SVG

January, the media proxy/embed service of stoatchat stoatchat/stoatchat, before version 0.15.5 improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml. An unauthenticated remote attacker who causes the service to proxy an attacker-hosted SVG e.g...

CVE-2026-100676 stoatchat before 0.15.5 Local Filesystem Read via SVG

January, the media proxy/embed service of stoatchat stoatchat/stoatchat, before version 0.15.5 improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml. An unauthenticated remote attacker who causes the service to proxy an attacker-hosted SVG e.g...

EUVD-2026-87649

January, the media proxy/embed service of stoatchat stoatchat/stoatchat, before version 0.15.5 improperly resolves SVG values as local filesystem paths when a fetched resource is served as image/svg+xml. An unauthenticated remote attacker who causes the service to proxy an attacker-hosted SVG e.g...

CVE-2026-100607

Versions of Flowise through 3.1.4 are vulnerable to an authentication bypass because the system resolves SSO and local-password users solely by email. The application fails to store provider or subject identifier bindings , enabling an attacker to authenticate as any existing user by claiming the...

CVE-2026-96512

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm — Sudo Project A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing Z timezone indicator, the...

CVE-2019-1064

CVE-2019-1064 - AppXSVC Local Privilege Escalation https://www.rythmstick.net/posts/cve-2019-1064/...

cve-2021-3156

sudo Heap Overflow Vulnerability CVE-2021-3156 Vulnerability Overview A foreign research team discovered a sudo heap overflow vulnerability CVE-2021-3156, which had been hidden for a decade. An ordinary user can exploit this vulnerability to gain root privileges on a sudo host with default...

CVE-2019-10149-Exim4-RCE

Cr.Exim 4.87 - 4.91 - Local Privilege Escalation Cr.Link: https://www.exploit-db.com/exploits/46996 1.This method requires you to first access the target machine with standard user privileges. 2.Once you have accessed the target machine, create a script file with the following content: vi raptor....

aziot-cctv-cve-2025-50777

aziot-cctv-cve-2025-50777 CVE-2025-50777: Root Access and Plaintext Credential Exposure in AZIOT Smart CCTV Summary A local access control vulnerability CVE-2025-50777 has been identified in the firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera Firmware Version V1.00.02. Thi...

zimbramail-CVE-2025-68645-poc

zimbramail-CVE-2025-68645-poc Una prueba de concepto que explota una vulnerabilidad de inclusión de archivos locales LFI existente en la interfaz de usuario clásica de Webmail de Zimbra Collaboration ZCS 10.0 y 10.1 debido al manejo inadecuado de los parámetros de solicitud proporcionados por el...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net: skbuff: Fixed an issue where a missing zerocopy reference was present in the pskbcarve helpers. Both pskbcarveinsideheader and pskbcarveinsidenonlinear copy the old skbsharedinfo header into a new buffer using memcpy. Thi...

CVE-2023-4636

CVE-2023-4636 The vulnerability in the limelight is an unauthenticated remote code execution RCE issue stemming from insufficient controls on file paths occurring during image processing via Imagick. It enables adversaries to supply files via FTP, leading to local file inclusion and remote code...

CVE-2026-16475-PoC

CVE-2026-16475 - OCSinventory LFI PoC Local File Inclusion vulnerability in OCSinventory 2.12.4 Vulnerability Details CVE ID: CVE-2026-16475 CVSS Score: 6.9 Medium CWE: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program Affected Version: OCSinventory 2.12.4 Status:...

CVE-2024-48990

CVE-2024-48990 Exploit Local Privilege Escalation in needrestart 3.8 via PYTHONPATH injection. How It Works 1. needrestart runs as root and scans all processes 2. Finds our Python process, reads PYTHONPATH=/tmp/.m from /proc/pid/environ 3. Executes Python as root with our malicious PYTHONPATH 4...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 es una vulnerabilidad crítica de ejecución remota de código y escalada de privilegios local denominada "PrintNightmare". Se han publicado exploits de prueba de concepto Python, C++ para la capacidad de ejecución remota de código, y una versión en C para escalada de...

tgscope

tgscope Telegram OSINT, scraping and archival. A local web app that runs entirely on your machine and talks only to Telegram. npm install npm start Then open http://127.0.0.1:5173. The first run walks you through API credentials, a QR sign-in and loading your dialogs. Telegram is the only server ...

CVE-2017-9606

CVE-2017-9606 Debido a la insuficiente verificación de integridad, autenticidad y los bajos privilegios de usuario en la carpeta de actualización, un usuario local puede crear archivos de actualización ViPNet falsos con código de ejecución arbitrario y colocarlos en la carpeta de actualización de...