Search Vulnerabilities

DPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface

Windows Telephony Service Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management

Local users can perform a local root exploit via smb4k mounthelper

EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal

jsPDF has Local File Inclusion/Path Traversal vulnerability

HBS 3 Hybrid Backup Sync

Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation

Langflow Vulnerable to External Control of File Name or Path

@vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Development

ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution

WP User Manager <= 2.9.12 - Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' Parameter

Zoom Rooms for macOS - External Control of File Name or Path

Windows Storage VSP Driver Elevation of Privilege Vulnerability

ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure

Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion

Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature

Unauthenticated Arbitrary File Deletion (patch_contents.php)