Langflow < 1.9.1 - Unauthenticated File Upload

Langflow 1.9.1 contains an unrestricted file upload caused by lack of upload limitations, letting unauthenticated attackers exhaust server space and leak absolute file paths, exploit requires network access. id: CVE-2026-55450 info: name: Langflow 1.9.1 - Unauthenticated File Upload author: xtr0n...

CouchCMS <= 2.0 - Path Disclosure

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...

Drupal 11.x-dev - Full Path Disclosure

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. id: CVE-2024-45440 info: name: Drupal 11.x-dev - Full Path Disclosure author: DhiyaneshDK severity: medium description: |...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. An internal installation path disclosure exists due to the lack of authentication for /html/repository.System. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16668 inf...

emlog 5.3.1 Path Disclosure

emlog v5.3.1 is susceptible to full path disclosure via t/index.php, which allows an attacker to see the path to the webroot/file. id: CVE-2021-3293 info: name: emlog 5.3.1 Path Disclosure author: h1ei1 severity: medium description: emlog v5.3.1 is susceptible to full path disclosure via...

WP Popups - Information Disclosure

WP Popups - WordPress Popup builder plugin for WordPress contains a full path disclosure caused by using mobiledetect without access restrictions, letting unauthenticated attackers retrieve server paths, exploit requires no specific conditions. id: CVE-2024-6555 info: name: WP Popups - Informatio...

Campaign Monitor for WordPress - Information Disclosure

Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a full path disclosure caused by improper access restriction and enabled displayerrors in /forms/views/admin/create.php, letting unauthenticated attackers retrieve server paths, exploit requires displayerrors to be...

DedeCMS 5.7 - Path Disclosure

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/incarchivesfunctions.php id: CVE-2018-6910 info: name: DedeCMS 5.7 - Path Disclosure author: pikpikcu severity: high description: DedeCMS 5.7 allows remote attackers to discover t...

CVE-2026-100854

AzuraCast before 0.23.6 lacks RequireInternalConnection middleware on the Liquidsoap API endpoint and incorrectly derives the AutoDJ flag from header presence rather than validated value. Users with View station permission can inject arbitrary now-playing metadata, disrupt live broadcasts, and...

EUVD-2026-87834

AzuraCast before 0.23.6 lacks RequireInternalConnection middleware on the Liquidsoap API endpoint and incorrectly derives the AutoDJ flag from header presence rather than validated value. Users with View station permission can inject arbitrary now-playing metadata, disrupt live broadcasts, and...

wphunter

WPHunter Tool ☣ WPHunter A Wordpress Vulnerability Scanner You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run on WordPress. which is now powers 26% of the Web. Remarkably enough thousands...

WPintel

Features • Installation • Use • License • Download Video Demonstration Features Detect WordPress version Detect version vulnerabilities Enumerate Users Detect Themes Detect Plugins Find full path disclosure Check user registration status Installation Google chrome users can download WPintel from...

CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 Drupal 11.x-dev の core/authorize.php は、hashsalt の値が存在しないファイルの filegetcontents である場合、（エラーログが None であっても）完全パス開示 Full Path Disclosure を許可します。 使用方法 root@kitploit: python CVE-2024-45440.py ラボ（演習環境）の構築 settings.php はマウントによってコンテナ内の settings.php を置き換えます。 settings.php...

CVE-2025-6082

CVE-2025-6082 전체 경로 노출 PoC 저자 : Byte Reaper 텔레그램 : @ByteReaper0 CVE : CVE-2025-6082 취약점 : 전체 경로 노출 CWE-200 설명 이 개념 증명PoC은 Birth Chart Compatibility 워드프레스 플러그인버전 ≤ 2.0의 전체 경로 노출 버그를 악용합니다. PoC는 플러그인의 index.php 엔드포인트에 HTTP GET 요청을 보내고, PHP 경고 또는 치명적 오류를 캡처하여 서버의 파일 시스템 경로예:...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - アドバイザリ 06 - 25/02/05 プログラム: phpBB 2.0.12 ホームページ: http://www.phpbb.com 影響を受けるバージョン: phpBB 2.0.12 およびそれ以下のバージョン リスク: 低リスク!! 影響: フルパス開示 root@kitploit: -==phpBB 2.0.12 フルパス開示==- 説明 phpBB...

EUVD-2026-85536

StringListPathField.tointernalvalue calls os.path.exists on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute paths on the controller-web pod. Tenant superuser can confirm /etc/tower/SECRETKEY, k8s service-account token, receptor sockets, ConfigMap mount...

CVE-2001-0934

CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 には、リモート攻撃者が pwd コマンドを使用してサーバールートの物理パスを取得できる脆弱性があります。pwd コマンドは完全なパス名を一覧表示します。 Securiteam 公開情報: http://www.securiteam.com/exploits/6D00L2A35K.html 外部情報: https://marc.info/?l=bugtraq&m=100698397818175&w=2 Cisco リファレンス:...

CVE-2024-5735

CVE-2024-5735 AdmirorFrames Joomla! 拡張機能 params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR; この問題は、画像パスを構築する際に JPATHBASE 変数を直接使用したことが原因でした。この問題は AdmirorFrames Joomla! 拡張機能のバージョン 5.0 で修正されています。...

CVE-2024-45440

Enumeration tool for CVE-2024-45440 by DividesByZer0 & c0d3Ninja CVE-2024-45440 - Drupal 11.x-dev Full Path Disclosure PoC 选项： -h, --help 显示此帮助信息并退出 -u URL, --url URL 要扫描的单个 URL。 -f FILE, --file FILE 包含要扫描的 URL 的文件（每行一个）。 -t THREADS, --threads THREADS 线程数（默认：5）。 -v, --verbose 显示非脆弱目标和错误。...

CVE-2026-37069

CVE-2026-37069 Veno File Manager Project 4.4.9 の /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php における絶対パス開示により、認証されていない攻撃者がエンドポイントに GET リクエストを送信することで、アプリケーションコードが実行されているシステムディレクトリを知ることができます。...