Search Vulnerabilities

ChurchCRM: Authenticated Remote Code Execution via Unrestricted PHP File Write in Database Restore Function

Unauthorized Arbitrary File Read via RMI in AdminServer Interface

CF Image Hosting Script 1.6.5 Unauthorized Database Access

Chamilo LMS affected by unauthenticated RCE in main/install folder

A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1

LORIS has a path traversal in FilesDownloadHandler

LORIS has potential cross-site scripting in help_editor module

LORIS has a path traversal in static router

HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft

code-projects Online Food Ordering System localhost.sql privilege escalation

Ruckus AP CLI Arbitrary File Read Allows Authenticated Remote File Access

Potential unauthorized access to files on the Web HMI server host

code-projects Simple Food Ordering System Database Backup food.sql file access

FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads

SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes

ZKTeco ZKAccess Professional 3.5.3 Privilege Escalation via Insecure Permissions

Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI

EverSync 0.5 Arbitrary File Download via files Directory

CVE-2026-2331

CVE-2026-2330