Lucene search
+L

68 matches found

KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•5 views

Jiangnan Online Judge 0.8.0 - Local File Inclusion Detection

Jiangnan Online Judge aka jnoj 0.8.0 is susceptible to local file inclusion via web/polygon/problem/viewfile?id=1&name=../. !/usr/bin/env python3 -- coding: utf-8 -- """Jiangnan Online Judge aka jnoj 0.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

7.5CVSS7.4AI score0.11302EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
•added 2026/02/23 1:31 p.m.•19 views

CVE-2026-2861

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to versi...

6.9CVSS5.2AI score0.00518EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/21 6:17 a.m.•34 views

CVE-2026-2861

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to versi...

6.9CVSS0.00518EPSS
SaveExploits0References9
CVE
CVE
•added 2026/02/21 6:02 a.m.•68 views

CVE-2026-2861

The CVE-2026-2861 entry affects Foswiki up to version 2.1.10, specifically the Changes/Viewfile/Oops component. The vulnerability arises from an unknown function that can lead to information disclosure and can be exploited remotely. Public exploit availability is indicated, with remediation via u...

6.9CVSS5.1AI score0.00518EPSS
SaveExploits0References9Affected Software1
Mend
Mend
•added 2026/02/21 6:02 a.m.•7 views

CVE-2026-2861

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to versi...

6.9CVSS5.1AI score0.00518EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2026/02/21 6:02 a.m.•51 views

CVE-2026-2861 Foswiki Changes/Viewfile/Oops information disclosure

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to versi...

6.9CVSS0.00518EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/02/21 6:02 a.m.•23 views

CVE-2026-2861

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to versi...

6.9CVSS5.2AI score0.00518EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/02/21 6:02 a.m.•9 views

CVE-2026-2861 Foswiki Changes/Viewfile/Oops information disclosure

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to versi...

6.9CVSS5.1AI score0.00518EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/21 12:00 a.m.•11 views

CVE-2026-2861: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was detected in Foswiki up to 2.1.10. The affected element is an unknown function of the component Changes/Viewfile/Oops. The manipulation results in information disclosure. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to versi...

6.9CVSS5.2AI score0.00518EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/21 12:00 a.m.•34 views

PT-2026-21359

Name of the Vulnerable Software and Affected Versions Foswiki versions prior to 2.1.11 Description A flaw exists in Foswiki that allows information disclosure. The issue is located within an unknown function of the Changes/Viewfile/Oops component. This can be exploited remotely. The exploit is...

6.9CVSS5.7AI score0.00518EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2026/02/21 12:00 a.m.•30 views

Foswiki access control vulnerability

Foswiki is a Wiki software developed in the Perl language. It is a truly free and open-source platform for creating user-defined applications, suitable for both public and corporate environments. Foswiki versions 2.1.10 and earlier contained an access control vulnerability, which stemmed from...

6.9CVSS5.8AI score0.00518EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/01/19 1:23 a.m.•30 views

CVE-2026-1107

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function checkuserinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit...

9.8CVSS6.1AI score0.0052EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/01/18 1:15 a.m.•23 views

CVE-2026-1107

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function checkuserinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit...

9.8CVSS6AI score0.0052EPSS
SaveExploits1References5
NVD
NVD
•added 2026/01/18 1:15 a.m.•28 views

CVE-2026-1107

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function checkuserinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit...

9.8CVSS0.0052EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/01/18 12:32 a.m.•12 views

CVE-2026-1107

A weakness has been identified in EyouCMS up to 1.7.1/5.0. Impacted is the function checkuserinfo of the file Diyajax.php of the component Member Avatar Handler. Executing a manipulation of the argument viewfile can lead to unrestricted upload. The attack may be performed from remote. The exploit...

6.5CVSS6.1AI score0.0052EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/01/18 12:00 a.m.•43 views

EyouCMS code-related vulnerabilities

EyouCMS is an open-source content management system CMS developed by Eyou Corporation in China, based on ThinkPHP. Versions of EyouCMS 1.7.1/5.0 and earlier have code vulnerabilities. These vulnerabilities stem from incorrect handling of the viewfile parameter in the checkuserinfo function of the...

9.8CVSS6.6AI score0.0052EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•12 views

MiracleLinux 3 : resin-3.1.9-1AXS3 (AXSA:2009-48:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2009-48:01 advisory. Resin Open Source provides JSP, Servlet, and EJB functionality under the GPL license. Fixed bugs: CVE-2008-2462 Cross-site scripting XSS vulnerability in the...

4.3CVSS6.1AI score0.02849EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•33 views

EUVD-2006-2438

Malware in sbrugna...

5CVSS6.4AI score0.06754EPSS
SaveExploits2References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2004-2339

Malware in sbrugna...

7.5CVSS6.4AI score0.09874EPSS
SaveExploits2References7
CNVD
CNVD
•added 2025/07/07 12:00 a.m.•13 views

Simple forum forum_viewfile.php file SQL Injection Vulnerability

Simple forum is a simple forum. Simple forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Name in the file /forumviewfile.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

7.5CVSS7.5AI score0.00421EPSS
SaveExploits1References1
Rows per page
Query Builder