CVE-2026-105748

The Docling library (versions 2.16.0 through 2.131.0 ) is vulnerable because the InputFormat.JSON_DOCLING backend fails to reject picture image references containing local paths or file URIs during serialized DoclingDocument input validation. When processing with ImageRefMode.EMBEDDED , the Docli...

CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. 使用 python CVE-2024-45440.py 靶场部署 settings.php将通过挂载的方式替换掉容器中的settings.php...

wphunter

WPHunter ツール ☣ WPHunter - WordPress 脆弱性スキャナー このツールは、WordPress サイトのセキュリティをチェックし、脆弱性を発見するために使用できます。 WordPress は 7500 万以上のウェブサイトで稼働しており、現在ウェブの 26% を支えています。驚くべきことに、数千もの WP サイトが攻撃に対して脆弱で、毎日ハッキングされています。データをすべて失う可能性があり、多大なコストが発生することもあれば、攻撃者があなたの WordPress...

Langflow < 1.9.1 - Unauthenticated File Upload

Langflow 1.9.1 contains an unrestricted file upload caused by lack of upload limitations, letting unauthenticated attackers exhaust server space and leak absolute file paths, exploit requires network access. id: CVE-2026-55450 info: name: Langflow 1.9.1 - Unauthenticated File Upload author: xtr0n...

WP Popups - Information Disclosure

WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiledetect without access restrictions, letting unauthenticated attackers retrieve server paths, exploit requires no specific conditions. id: CVE-2024-6555 info: name: WP Popups - Informatio...

WPintel

機能 • インストール • 使い方 • ライセンス • ダウンロード 動画デモ 機能 WordPress バージョンの検出 バージョンの脆弱性を検出 ユーザーの列挙 テーマの検出 プラグインの検出 フルパス開示の確認 ユーザー登録ステータスの確認 インストール Google Chrome ユーザーは Chrome ウェブストアから WPintel をダウンロードできます。 使い方 アイコンの色の意味 WPintel の使い方は非常に簡単です。WPintel を追加すると、WPintel アイコンの色でサイトが WordPress を使用しているかどうかを確認できます。 スキャンメニュー...

CVE-2024-5735

CVE-2024-5735 AdmirorFrames Joomla! 扩展 params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR; 此问题是由于在构造图片路径时直接使用了 JPATHBASE 变量所致。该问题已在 AdmirorFrames Joomla! 扩展 5.0 版本中修复。 受影响版本 5.0 公告 请将 AdmirorFrames Joomla!...

CVE-2024-45440

Enumeration tool for CVE-2024-45440 by DividesByZer0 & c0d3Ninja CVE-2024-45440 - Drupal 11.x-dev Full Path Disclosure PoC 选项： -h, --help 显示此帮助信息并退出 -u URL, --url URL 要扫描的单个 URL。 -f FILE, --file FILE 包含要扫描的 URL 的文件（每行一个）。 -t THREADS, --threads THREADS 线程数（默认：5）。 -v, --verbose 显示非脆弱目标和错误。...

CVE-2001-0934

CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 允许远程攻击者通过 pwd 命令获取服务器根目录的物理路径，该命令会列出完整路径名。 Securiteam 发布在 http://www.securiteam.com/exploits/6D00L2A35K.html 外部信息在 https://marc.info/?l=bugtraq&m=100698397818175&w=2 Cisco 参考在 https://tools.cisco.com/security/center/viewAlert.x?alertId=2884 作者 Alex...

CVE-2026-37069

CVE-2026-37069 Veno File Manager Project 4.4.9 中的 /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php 存在绝对路径泄露（Absolute Path Disclosure）漏洞，允许未认证攻击者通过向该端点发送 GET 请求，获知应用程序代码运行所在的系统目录。...

Drupal 11.x-dev - Full Path Disclosure

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. id: CVE-2024-45440 info: name: Drupal 11.x-dev - Full Path Disclosure author: DhiyaneshDK severity: medium description: |...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...

Campaign Monitor for WordPress - Information Disclosure

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

DedeCMS 5.7 - Path Disclosure

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php id: CVE-2018-6910 info: name: DedeCMS 5.7 - Path Disclosure author: pikpikcu severity: high description: DedeCMS 5.7 allows remote attackers to discover t...

emlog 5.3.1 Path Disclosure

emlog v5.3.1 is susceptible to full path disclosure via t/index.php, which allows an attacker to see the path to the webroot/file. id: CVE-2021-3293 info: name: emlog 5.3.1 Path Disclosure author: h1ei1 severity: medium description: emlog v5.3.1 is susceptible to full path disclosure via...

CouchCMS <= 2.0 - Path Disclosure

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...

CVE-2025-6082

CVE-2025-6082 フルパス開示 PoC 作者 : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 脆弱性 : Full Path Disclosure CWE-200 説明 このProof‑of‑Conceptは、Birth Chart Compatibility WordPressプラグイン（バージョン≤ 2.0）のフルパス開示バグを悪用します。POCはプラグインのindex.phpエンドポイントにHTTP...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - 安全公告 06 - 25/02/05 程序：phpBB 2.0.12 主页：http://www.phpbb.com 受影响版本：phpBB 2.0.12 及更低版本 风险：低风险!! 影响：完整路径泄露 -==phpBB 2.0.12 完整路径泄露==- 描述 phpBB 是一个高性能、完全可扩展且高度可定制的开源论坛软件包。phpBB...

AlmaLinux 9.2 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (ALMALINUX9.2:CLSA-2025:1739822224)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739822224 advisory. - A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of...

CVE-2026-100854

AzuraCast before 0.23.6 lacks RequireInternalConnection middleware on the Liquidsoap API endpoint and incorrectly derives the AutoDJ flag from header presence rather than validated value. Users with View station permission can inject arbitrary now-playing metadata, disrupt live broadcasts, and...