CVE-2024-39210

CVE ID CVE-2024-39210 PRODUCT Best house rental management system VERSION =1.0 PROBLEM TYPE Incorrect Access Control Description Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows...

PluckCMS 4.7.10 - Unrestricted File Upload

Exploit Title: PluckCMS 4.7.10 - Unrestricted File Upload Date: 2025-11-25 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/pluck-cms/pluck/ Software Link: https://github.com/pluck-cms/pluck/ Version: 4.7.10 Tested on: Windows CVE : CVE-2020-20969 Proof Of Concept GET...

EUVD-2012-4329

Malware in sbrugna...

EUVD-2007-4169

Malware in sbrugna...

EUVD-2006-1166

Malware in sbrugna...

EUVD-2011-3696

Malware in sbrugna...

EUVD-2018-11239

Malware in sbrugna...

EUVD-2006-2697

Malware in sbrugna...

EUVD-2012-1655

Malware in sbrugna...

EUVD-2011-3751

Malware in sbrugna...

EUVD-2006-7031

Malware in sbrugna...

EUVD-2018-3262

Malware in sbrugna...

EUVD-2011-3697

Malware in sbrugna...

EUVD-2024-32282

Malicious code in bioql PyPI...

EUVD-2022-44043

Malicious code in bioql PyPI...

EUVD-2022-1482

Malicious code in bioql PyPI...

WordPress PrivateContent-Mail Actions File Inclusion Vulnerability

WordPress PrivateContent-Mail Actions is the name of the plugin or feature module for mail actions and member management. WordPress PrivateContent-Mail Actions suffers from a file inclusion vulnerability that stems from improper file inclusion control, which can be exploited by an attacker to cau...

CVE-2025-24760 WordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Sofass sofass allows PHP Local File Inclusion.This issue affects Sofass: from n/a through = 1.3.4...

CVE-2011-3808

The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svnintegration/config.inc.php and certain other files...

CVE-2011-3804

SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugin/tinymce/plugins/advimage/images.php...